Avamar: 19.4 Qualys security scan reports QID 86445: Directory Listing

Summary: The web server has some listable directories. Disable directory browsing or listing for all directories.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

A Qualys scan reports "QID 86445 Directory Listing for /icons".

The Apache2/Tomcat directory listing for all but /icons are disabled. No other directory or subdirectory can be viewed or listed from Avamar Web UIs.

Cause

The apache2 default-server.conf contains a clause to explicitly enable the /icons/ WEB directory.
The /etc/apache2/default-server.conf file contains: 
Alias /icons/ "/usr/share/apache2/icons/

Resolution

Open the default-server.conf file 
/etc/apache2/default-server.conf

Comment out the following line as shown below: 
#Alias /icons/ "/usr/share/apache2/icons/


Restart apache2 and tomcat as root:

systemctl restart apache2
emwebapp.sh --restart

 

Affected Products

Avamar
Article Properties
Article Number: 000206199
Article Type: Solution
Last Modified: 08 يناير 2026
Version:  4
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.