Hello,we ran our liferay application through fortify webinpsect and
we are getting a security issue such as Web Server
Misconfiguration: Unprotected Directory. on the followiing
payload attack url https://xxx.xx.xx..com:443/en/
, https://xxx.xx.xx..com:443/group/ https://<hostname>.com:443/tags/ https://xxx.xx.xx..com:443/home/, https://xxx.xx.xx..com:443/user.
WebInspect is recommending to have restrict access on the following
page URLs:<hostname>/web or <hostname>/home or
<hostname>/tag or <hostname>/group. When a request is made
to his page it returns a 200. When we type page url with those
resources it returns to the main page. Is there a way to return a 401
unauthorized access when the user who is not logged in try to access
<hostname>/web or <hostname>/group or <hostname>/tag etc,,?
