Homebrew · Report #222063
Sensitive information disclosure via response headers on jenkins.brew.sh
Duplicatestatus
lowseverity
1upvotes
25 Apr 2017disclosed
How it was found
While logging into jenkins.brew.sh site, the vulnerable nginx version is disclosed via response headers. There is a chance with known vulnerabilities this could be compromised. so better to avoid banner disclosure with "Server Tokens Prod off" modification in conf file.
Please let me know if any further information is required.
Regards, Mr_R3boot.