Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-24186

ODF Dynamic plugin should not expose Server header

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Major Major
    • 4.16.0
    • 4.12.z
    • Management Console
    • None
    • Important
    • No
    • False
    • Hide

      None

      Show
      None
    • Release Note Not Required
    • In Progress

      Customer pentest shows that the Server header is returned by admin console when browsing

      https://console-openshift-console$domain/locales/resource.json?lng=en&ns=plugin__odf-console

      This could lead to information about CVE for a potential attacker.

      Response header:

      Server: nginx/1.20.1

              jhadvig@redhat.com Jakub Hadvig
              rh-ee-mmayeras Mickael Mayeras
              Yanping Zhang Yanping Zhang
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: