Stronghold Secure Web Server Information Disclosure Vulnerability

Stronghold Secure Web Server Information Disclosure Vulnerability

Solution:
This issue has been patched in build 3015 of Stronghold.

The Stronghold Administration guide suggests making the following changes to httpd.conf to deny access to outside parties:

To do this, locate the following container in httpd.conf

<Location /stronghold-status>
SetHandler server-status
</Location>
Add the following inside the container:

order deny,allow
deny from all
allow from .your.domain