Description

Apache /server-info displays information about your Apache configuration. If you are not using this feature, disable it.

Remediation

Disable this functionality if not required. Comment out the <Location /server-info> section from httpd.conf.

References

Apache Homepage

Related Vulnerabilities

WordPress Plugin VikBooking Hotel Booking Engine & PMS Multiple Vulnerabilities (1.5.3)

XML external entity injection

WordPress Plugin HTML5 MP3 Player with Playlist Free Information Disclosure (2.6)

Cookies with missing, inconsistent or contradictory properties

JBoss ServerInfo MBean

Severity

Medium

Classification

CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration Information Disclosure