E-Arogya

Technology/Version Disclosure
observation : Repeated
CWE : CWE-200
Description :
The HTTP responses returned by this web application include a header named server.
The value of this header is used to determine which version of server technology or
framework is in use. It is not necessary for production sites and should be disabled
Affected Path(s) :
/(WebServer)
Impact :
The HTTP header may disclose sensitive information. This information can be used to
launch further attacks.
Evidence/Proof Of Concept :
Step 1: Technology version disclosed as shown in below screenshot.

Step 2: Technology version disclosed as shown in below screenshot.

Recommendation :
It is recommended to implement generic error messages and remove the version
information in response headers.