Information Leak in Page Banner

By
Anandhu Krishnan
Published on
14 May 2024
Vulnerability

Description

A version banner string was inadvertently exposed in the server’s response, potentially aiding attackers in identifying targeted vulnerabilities and weaknesses.

Recommendation

To prevent such leaks, configure the server to withhold this information. For instance, under Tomcat, use the ‘server’ directive and custom error pages; under Apache, utilize the ‘ServerSignature’ and ‘ServerTokens’ directives.


Written by
Anandhu Krishnan
Anandhu Krishnan
Lead Engineer
Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 10 days