As a part of improving the security on a eCommerce site, it is always a good idea to turn off fingerprinting.
How to reproduce this: Go to any static asset on the site and change it to wrong file name and you will see a 404 or even 403 errors. It would print all the information regarding the web server, which could be potentially exploited.
IBM_HTTP_Server/X.X.X.X-PMX4623 Apache/2.1.97 (Unix) Server at host.com Port 80
In order to protect the site for security reasons, these values need to be changed in httpd.conf to make the environment more secure. Make this change and restart webserver for the change to reflect.
Test Environment:
ServerTokens Full
Production Env:
ServerTokens Prod
Test Environment:
ServerSignature On
Prod Environment:
ServerSignature Off
How to reproduce this: Go to any static asset on the site and change it to wrong file name and you will see a 404 or even 403 errors. It would print all the information regarding the web server, which could be potentially exploited.
IBM_HTTP_Server/X.X.X.X-PMX4623 Apache/2.1.97 (Unix) Server at host.com Port 80
In order to protect the site for security reasons, these values need to be changed in httpd.conf to make the environment more secure. Make this change and restart webserver for the change to reflect.
Test Environment:
ServerTokens Full
Production Env:
ServerTokens Prod
Test Environment:
ServerSignature On
Prod Environment:
ServerSignature Off
