Description

Apache /server-info displays information about your Apache configuration. If you are not using this feature, disable it.

Remediation

Disable this functionality if not required. Comment out the <Location /server-info> section from httpd.conf.

References

Apache Homepage

Related Vulnerabilities

WordPress Plugin Quick Buy For Woocommerce Arbitrary File Disclosure (2.0)

WordPress Plugin Fast Velocity Minify Information Disclosure (2.7.6)

WordPress 5.7.x Multiple Vulnerabilities (5.7 - 5.7.2)

ReviveAdserver Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-7368)

Adobe ColdFusion 9 administrative login bypass

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration Information Disclosure CWE-200