StorageGRID のセキュリティヘッダーが検出されません Apache Webserver サーバのステータスに情報漏洩の脆弱性
環境
- StorageGRID
- Qualys スキャン
問題
Qualysのスキャン製品が脆弱性を報告します
Assessment-<number> Q4 FY2021-22 - DCM - Infra VA - EUR - Vulnerability-83527 HTTP Security Header Not Detected Low Non-Compliance with defined Standard or Best Practice <IPAddress> - HTTP Security Header Not Detected <IPAddress> 443 Note:
Assessment-<number> Q4 FY2021-22 - DCM - Infra VA - EUR - Vulnerability-83541 Apache Webserver server-status Information Disclosure Vulnerability Medium Non-Compliance with defined Standard or Best Practice <IPAddress> - Apache Webserver server-status Information Disclosure Vulnerability <IPAddress> 8443 Workaround: If you don't use this feature, comment out the following lines in your httpd.conf file: