Description
Exposing the Apache server-info page allows attackers to gather detailed information about the server configuration, installed modules, and other system-related details, aiding potential attacks.
Recommendation
To mitigate this risk, disable the server-info functionality in the Apache configuration file. Additionally, restrict access to the /server-info URL using appropriate access controls.
References
Could your website be exposed too?
SmartScanner can check your website for Apache server-info enabled and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Apache server-status enabled - Vulnerability
- Apache Version Disclosure - Vulnerability
- Server Version Disclosure - Vulnerability
- Tomcat Version Disclosure - Vulnerability
You might also like:
See something that needs correcting? Let us knowUpdated May 13, 2024