Insecure Configuration Management
In this vulnerability, even if we try to access root directory locally,it will enlist all the files and directories.Clickon any file like a bmp file or text files, it will be displayed. But on click of“web.config” access isdenied. As the security is provided on configuration file of web application.(Fig 8)