Private IP Address Leaked in HTTP Headers - Microsoft Community


i running issue, "private ip address leaked in http headers" vulnerabilities being detected. version of iis being utilized iis7, , used following link/command troubleshoot issue. 

https://blogs.msdn.microsoft.com/mike/2008/11/18/removing-an-iis-servers-ip-address-from-http-responses/

appcmd.exe set config -section:system.webserver/serverruntime /alternatehostname:”myserver”  /commit:apphost

originally, vulnerable url https://x.x.x.x/autodiscover. after applying above command, , while replacing "myserver" address on cas server, re-ran vulnerability scan. vulnerability still present, vulnerable url now https://x.x.x.x/autodiscover/autodiscover.xml. 

the other troubleshooting steps have found related iis6, not compatible iis7, since seem involve metabase. suggestions or resolutions appreciated. 

hi,

your question outside scope of community.

would kindly repost question:

"iis.net forums"

https://forums.iis.net/

technet forums:

https://social.technet.microsoft.com/forums/en-us/home

msdn forums:

https://social.msdn.microsoft.com/forums/en-us/home

cheers.



Windows / Other/Unknown / Security & privacy



Comments

Popular posts from this blog

Error 8233 Microsoft Windows security -spp - Microsoft Community

Replacement for Microsoft Model 1423 2.4GHz USB Wireless Mouse - Microsoft Community