Description
The HTTP responses returned by this web application include a header named X-AspNetMvc-Version. The value of this header disclose the version of ASP.NET MVC in use. It is not necessary for production sites and should be disabled.
Remediation
To remove the X-AspNetMvc-Version header add the following code in Global.asax, in the Application Start event:
MvcHandler.DisableMvcResponseHeader = true;
References
Related Vulnerabilities
Unrestricted access to Kong Gateway API
Roundcube Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-19205)
WordPress Plugin BackupBuddy Arbitrary File Download (8.7.4.1)
WordPress Plugin WP Import Export Information Disclosure (3.9.15)
WordPress Plugin History Collection Arbitrary File Download (1.1.1)