WebDAV disabling

Karol Urbaniak_yke2bz

Due to security issue in confluence (link) regarding WebDAV I want to disable it. I read article about configuring WebDAV and I have no clue how to disable it. 

There is a method to restrict access from Microsoft client but it doesn't work or I'm doing it in a wrong way. Please provide regex to disallow methods (PROPFIND, PROPPATCH, MKCOL, ...) for Microsoft clients.

PS

below doesn't work

PROPFIND /plugins/servlet/confluence/default HTTP/1.1 Content-Language: en-us Accept-Language: en-us Content-Type: text/xml Translate: f Depth: 1 Content-Length: 489
User-Agent: Microsoft Data Access Internet Publishing Provider DAV
Host: 127.0.0.1:8082
Connection: Keep-Alive

Thank you.

 

Charly _DEISER_

Hi @Karol Urbaniak 

To disable both plugins you need to login as an administrator and follow this steps:

Go to Manage apps / add-ons select System, and disable the following system plugins in Confluence:

• WebDAV plugin
• Widget Connector

That will mitigate the security problem while you are able to upgrade version.

Hope this helps!