Security Test: Proxy Disclosure¶

Scanner(s) Support¶

Description¶

Default Severity: low

A proxy disclosure happens when details about a proxy server become visible, giving an attacker clues to weaknesses you might not realize exist. This can happen if error messages or other responses leak information about how your proxy is configured. An attacker could use those clues to narrow down what you’re running and even target the proxy to find other vulnerabilities, potentially opening the door to bigger attacks. Many developers mistakenly assume that setting up a proxy guarantees invisibility, so not closely managing what the proxy reveals can end up being a significant security risk.

Configuration¶

Identifier: configuration/proxy_disclosure

Examples¶

All configuration available:

checks:
  configuration/proxy_disclosure:
    skip: false # default

Compliance and Standards¶