Vulnerability library
Security checkMay 13, 2024

Apache Version Disclosure

Understand the exposure, see the recommended fix, and check whether your own website has related weaknesses.

Informational severityHTTP HeadersInformation DisclosureServer Misconfiguration

Check your website

Find this and other vulnerabilities with a free scan.

Your scan runs on your computer. No account required.

Description

A misconfigured web server may expose the Apache version number either in the Server HTTP header or in the body of error pages. Attackers leverage this information to identify specific Apache versions and potentially exploit known vulnerabilities.

Test for Apache Version Disclosure Vulnerability with SmartScanner

Donwload FREE!

Recommendation

To address this issue, open the Apache configuration file (httpd.conf or apache2.conf) and add the following lines:

ServerTokens Prod
ServerSignature Off

Then, restart the web server to apply the changes.

References

Could your website be exposed too?

SmartScanner can check your website for Apache Version Disclosure and gives you actionable findings to investigate.

Start a free scan

Related Issues

You might also like:

Exploiting Server Version Disclosure

Complete guide to HTTP Headers for securing websites (Cheat Sheet)

Better Passive Vulnerability Testing with SmartScanner version 1.7

See something that needs correcting? Let us knowUpdated May 13, 2024