Nessus Output

The remote web server reveals the physical path of the webroot when a
nonexistent page is requested.

While printing errors to the output is useful for debugging
applications, this feature should be disabled on production servers.

Solution

• Disable debug
• Implement Custom Errors

References

• HTTP Errors <httpErrors>