Description

This Axis enabled web application is running in development mode that disclose the server version and detailed stack trace information.

It's recommended to modify the configuration file WEB-INF/server-config.wsdd to switch the system from development to production, preventing the information leakage.

Remediation

In the example below, the web application will switch the system from development mode to production mode:

<globalConfiguration>
 <parameter name="axis.development.system" value="false"/>
</globalConfiguration>

References

Related Vulnerabilities