Vulnerability library
Security checkMay 13, 2024

Tomcat Version Disclosure

Understand the exposure, see the recommended fix, and check whether your own website has related weaknesses.

Informational severityInformation DisclosureServer MisconfigurationTomcat

Check your website

Find this and other vulnerabilities with a free scan.

Your scan runs on your computer. No account required.

Description

Exposing detailed information such as the Tomcat version number facilitates attackers in identifying vulnerabilities and planning their attacks more effectively.

Test for Tomcat Version Disclosure Vulnerability with SmartScanner

Donwload FREE!

Recommendation

To mitigate this issue:

  • Open the server.xml file.
  • Find the Host section and add the following line immediately after it: <Valve className="org.apache.catalina.valves.ErrorReportValve" showReport="false" showServerInfo="false" />
  • Save the file and restart the application.

References

Could your website be exposed too?

SmartScanner can check your website for Tomcat Version Disclosure and gives you actionable findings to investigate.

Start a free scan

Related Issues

You might also like:

Exploiting Server Version Disclosure

These 7 PHP mistakes leave your website open to the hackers

Complete guide to HTTP Headers for securing websites (Cheat Sheet)

See something that needs correcting? Let us knowUpdated May 13, 2024