information disclose

How it was found

Hello Team . I Reported a issue - disclosure SERVER Version !!

when i interrupt this https://demo.nextcloud.com/ Request , its disclosure The server version Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips As you can See this Pic , or you can Interrupt the url useing Any Proxy tools like Burp Suite.

So it's Mostly important to keep secret of server version. & Configure your web server to prevent information leakage from the SERVER header of its HTTP response.

Importatnt Things is An attacker might use the disclosed information to harvest specific security vulnerabilities for the version identified.

Hope You guyz Fix This Probleam As soon As possible reference::https://hackerone.com/reports/141125 https://hackerone.com/reports/135782 https://hackerone.com/reports/167041

Thanks, Best Regards , Mohammad Abdullah