Apache <=2.4.54
Post Apache 2.4.54
, disables /server-status
directory by default.
All other versions before Apache 2.4.54
keeps this directory on by default, which may have been forgotten and give you access to this sensitive directory!
/server-status