Skip to main content

Header leak

Description​

The web/application server is leaking tech stack information via HTTP response headers. Access to such information may facilitate attackers identifying other frameworks/components your web application is reliant upon, and the vulnerabilities of such components may be subject to the leaked information.

Remediation​

Remove headers disclosing server-side softwares version.

Configuration​

Identifier: protocol/header_leak

Examples​

Ignore this check​

{
    "checks": {
        "protocol/header_leak": {
            "skip": true
        }
    }
}

Score​

References​