Description

Apache /server-info displays information about your Apache configuration. If you are not using this feature, disable it.

Remediation

Disable this functionality if not required. Comment out the section from httpd.conf.

References

Apache Homepage

Related Vulnerabilities

WordPress Plugin WebP Express Arbitrary File Disclosure (0.14.10)

Express express-session weak secret key

PHP allow_url_include enabled

TLS 1.1 enabled

Apache solr service exposed

Severity

Medium

Classification

CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Configuration Information Disclosure