Actions
Story #42
openEpic #51: Security Points Checking
Server Banner Disclosure
Start date:
01/13/2026
Due date:
% Done:
0%
Estimated time:
(Total: 0:00 h)
Acceptance Criteria:
Hide Server version details as they should not be displayed in
the application response.
Additionally, remove X-Powered by header as it discloses the
software or technology that the server is running.
DOR:
No
Story Points:
Work Type:
Feature
User Impact:
Technical Area:
Release Narrative:
Planned Sprint:
Completed In Sprint:
Spillover Reason:
Deployment Reference URL:
Description
The X-Powered-By header often reveals the underlying technology stack or framework used by the server (e.g., PHP, ASP.NET, Apache, etc.). Attackers can leverage this information to tailor their attacks and exploit vulnerabilities specific to those technologies.
Actions