Security Test: Software Component Leak¶

Description¶

Default Severity: low

When a server unintentionally reveals details about the technology it uses, like specific software frameworks or versions, it gives attackers clues about where to strike. This leak makes it easier for bad actors to identify outdated or weak components that might be exploited. Often, such leaks happen because developers leave default settings in place or fail to properly mask error and debug messages. If left unaddressed, this vulnerability can turn your system into an easier target for attacks.

Configuration¶

Identifier: information_disclosure/software_component_leak

Examples¶

All configuration available:

checks:
  information_disclosure/software_component_leak:
    skip: false # default

Compliance and Standards¶