HTTP OPTIONS Vulnerability – Apache

Disable HTTP OPTIONS Method in Apache

In RHEL installations the httpd.conf file located in /etc/httpd/ you will need to enable mod_rewrite:

Uncomment or add:

LoadModule rewrite_module /usr/lib/apache2/modules/mod_rewrite.so

For each virtual host these directives need to be set in order to filter out OPTIONS method:

RewriteEngineOn

RewriteCond%{REQUEST_METHOD} ^OPTIONS

RewriteRule .* - [F