Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-24186

ODF Dynamic plugin should not expose Server header

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • 4.16.0
    • 4.12.z
    • Management Console
    • None
    • Important
    • No
    • False
    • Hide

      None

      Show
      None

      Customer pentest shows that the Server header is returned by admin console when browsing

      https://console-openshift-console$domain/locales/resource.json?lng=en&ns=plugin__odf-console

      This could lead to information about CVE for a potential attacker.

      Response header:

      Server: nginx/1.20.1

            jhadvig@redhat.com Jakub Hadvig
            rh-ee-mmayeras Mickael Mayeras
            Yanping Zhang Yanping Zhang
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated: