Description

The HTTP responses returned by this web application include a header named Server. The value of this header includes the version of Microsoft IIS server.

Remediation

Microsoft IIS should be configured to remove unwanted HTTP response headers from the response. Consult web references for more information.

References

Remove Unwanted HTTP Response Headers

Related Vulnerabilities

WordPress W3 Total Cache plugin predictable cache filenames

Possible sensitive files

Joomla! Core 3.0.x Information Disclosure (3.0.0 - 3.0.3)

WordPress Plugin WP Import Export Information Disclosure (3.9.15)

WordPress Plugin WooCommerce Arbitrary File Download (3.4.5)

Severity

Info

Classification

CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure Configuration