GetSecureScore

How to Fix Microsoft IIS Tilde Character Short File/Folder Name Disclosure

Description Microsoft Internet Information Server (IIS) suffers from a vulnerability which allows the detection of short names of files and directories which have en equivalent in the 8.3 version of the file naming scheme. By crafting specific requests containing the tilde ‘~‘ character, an attacker could leverage this vulnerability to find files or directories that Read More