Vulnerability library

Security checkMay 13, 2024

Microsoft IIS Tilde Directory Enumeration

Understand the exposure, see the recommended fix, and check whether your own website has related weaknesses.

Medium severityInformation Disclosure IIS Directory Listing

Check your website

Find this and other vulnerabilities with a free scan.

Your scan runs on your computer. No account required.

Description

In some versions of Microsoft IIS, it is possible to detect the existence of files using an 8.3 short filename (SFN). This vulnerability allows attackers to enumerate and find sensitive files on the web server, potentially leading to unauthorized access or exposure of confidential information.

Test for IIS Tilde Vulnerability with SmartScanner

Recommendation

Please read the reference for detailed information and mitigation strategies specific to this vulnerability.

References

Could your website be exposed too?

SmartScanner can check your website for Microsoft IIS Tilde Directory Enumeration and gives you actionable findings to investigate.

Start a free scan

Related Issues

You might also like:

Why you should use passive vulnerability scan on your website

Exploiting Server Version Disclosure

These 7 PHP mistakes leave your website open to the hackers

See something that needs correcting? Let us knowUpdated May 13, 2024