Description
The HTTP responses returned by this web application include a header named Server. The value of this header includes the version of Microsoft IIS server.
Remediation
Microsoft IIS should be configured to remove unwanted HTTP response headers from the response. Consult web references for more information.
References
Related Vulnerabilities
[Possible] Password Transmitted over Query String
WordPress Plugin Product Subtitle For WooCommerce Arbitrary File Disclosure (4.1)
WordPress Plugin WP Intercom-Slack for WordPress Information Disclosure (1.2.1)
WordPress Plugin Order Export & Order Import for WooCommerce Information Disclosure (1.0.8)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-29450)