Private IP Address Leaked in HTTP Headers - Microsoft Community
Windows / Other/Unknown / Security & privacy
i running issue, "private ip address leaked in http headers" vulnerabilities being detected. version of iis being utilized iis7, , used following link/command troubleshoot issue.
appcmd.exe set config -section:system.webserver/serverruntime /alternatehostname:”myserver” /commit:apphost
originally, vulnerable url https://x.x.x.x/autodiscover. after applying above command, , while replacing "myserver" address on cas server, re-ran vulnerability scan. vulnerability still present, vulnerable url now https://x.x.x.x/autodiscover/autodiscover.xml.
the other troubleshooting steps have found related iis6, not compatible iis7, since seem involve metabase. suggestions or resolutions appreciated.
hi,
your question outside scope of community.
would kindly repost question:
"iis.net forums"
technet forums:
https://social.technet.microsoft.com/forums/en-us/home
msdn forums:
https://social.msdn.microsoft.com/forums/en-us/home
cheers.
Windows / Other/Unknown / Security & privacy
Comments
Post a Comment