Description
The HTTP responses returned by this web application include a header named X-AspNetMvc-Version. The value of this header disclose the version of ASP.NET MVC in use. It is not necessary for production sites and should be disabled.
Remediation
To remove the X-AspNetMvc-Version header add the following code in Global.asax, in the Application Start event:
MvcHandler.DisableMvcResponseHeader = true;
References
Related Vulnerabilities
WordPress Plugin Contact Form Email Information Disclosure (1.2.66)
WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Information Disclosure (9.7.1)
WordPress Plugin RocketTheme RokBox Multiple Vulnerabilities (2.13)
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Information Disclosure (1.8.11)