Actions
Story #42
openEpic #51: Security Points Checking
Server Banner Disclosure
Start date:
01/13/2026
Due date:
% Done:
0%
Estimated time:
(Total: 0:00 h)
Acceptance Criteria:
Hide Server version details as they should not be displayed in
the application response.
Additionally, remove X-Powered by header as it discloses the
software or technology that the server is running.
DOR:
No
Story Points:
Work Type:
Feature
User Impact:
Technical Area:
Release Narrative:
Planned Sprint:
Completed In Sprint:
Spillover Reason:
Deployment Reference URL:
Description
The X-Powered-By header often reveals the underlying technology stack or framework used by the server (e.g., PHP, ASP.NET, Apache, etc.). Attackers can leverage this information to tailor their attacks and exploit vulnerabilities specific to those technologies.
Updated by rashmita rout about 1 month ago
- Subject changed from Provide User Option to Manage Active Sessions on Password Change to Server Banner Disclosure
- Assignee changed from Tingg BE to Tingg Operation
- Acceptance Criteria updated (diff)
Updated by rashmita rout about 1 month ago
- Description updated (diff)
rashmita rout wrote:
As a user, I want to choose whether to log out from all devices or keep existing sessions active when I change my password.
Actions