HexBrain

Homebrew · Report #222063

Sensitive information disclosure via response headers on jenkins.brew.sh

Duplicatestatus
lowseverity
1upvotes
25 Apr 2017disclosed

How it was found

While logging into jenkins.brew.sh site, the vulnerable nginx version is disclosed via response headers. There is a chance with known vulnerabilities this could be compromised. so better to avoid banner disclosure with "Server Tokens Prod off" modification in conf file.

Please let me know if any further information is required.

Regards, Mr_R3boot.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original