E-Arogya

28- Technology/Version Disclosure
CWE : CWE-200
Description :
The HTTP responses returned by this web application include a header named server.
The value of this header is used to determine which version of server technology or
framework is in use. It is not necessary for production sites and should be disabled
Affected Path(s) :
/(WebServer)
Impact :
The HTTP header may disclose sensitive information. This information can be used to
launch further attacks.
Recommendation :
It is recommended to implement generic error messages and remove the version
information in response headers.
Evidence/Proof Of Concept :
Step 1: Technology version disclosed as shown in below screenshot.