Description

Apache /server-info displays information about your Apache configuration. If you are not using this feature, disable it.

Remediation

Disable this functionality if not required. Comment out the <Location /server-info> section from httpd.conf.

References

Apache Homepage

Related Vulnerabilities

WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.9)

WordPress Plugin Simple History Information Disclosure (1.0.7)

WordPress Plugin Be POPIA Compliant Information Disclosure (1.1.5)

WordPress Plugin PAYPAL CURRENCY CONVERTER BASIC FOR WOOCOMMERCE Arbitrary File Disclosure (1.3)

WordPress Plugin Login by Auth0 Multiple Vulnerabilities (3.11.3)

Severity

Medium

Classification

CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration Information Disclosure