Server leaks version information via Server HTTP response header

[dsotirho-ucsc]

ZAP scan finding
Severity: Low

The web/application server is leaking version information via the "Server" HTTP response Description header. Access to such information may facilitate attackers identifying other vulnerabilities your web/application server is subject to.

Examples:

• https://anvilproject.org/
• https://anvilproject.org/favicon.ico (404 page)

Solution:

Ensure that your web server, application server, load balancer, etc. is configured to suppress the "Server" header or provide generic details.