Web Server Error Page Information Disclosure

This script is Copyright (C) 2016 Tenable Network Security, Inc.

Synopsis :

The remote web server discloses information via a default error page.

Description :

The default error page sent by the remote web server discloses
information that can aid an attacker, such as the server version and
languages used by the web server.

Solution :

Modify the web server to not disclose detailed information about the
underlying web server, or use a custom error page instead.

Risk factor :

Medium / CVSS Base Score : 5.0

Family: Web Servers

Nessus Plugin ID: 88490 ()

Bugtraq ID:


Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now