Werk #7083: Apache sends out minimal information about the running software and platform to HTTP clients
Komponente | Site management |
Titel | Apache sends out minimal information about the running software and platform to HTTP clients |
Datum | 12.02.2019 |
Checkmk Edition | Checkmk Raw (CRE) |
Checkmk-Version | 1.6.0b1 |
Level | Kleine Änderung |
Klasse | Sicherheitsfix |
Kompatibilität | Kompatibel - benötigt kein manuelles Eingreifen |
The site apache reports information about the running software and platform to the HTTP clients with each HTTP response using the "Server" HTTP header. It is common practice to minmize this information using the apache configuration option "ServerTokens Prod" which we do now for the site apache by default.
We don't modify this setting for the system wide apache. You'll have to configure the system apache on your own in case you want to configure it to work in the same way.