[ 
https://issues.apache.org/jira/browse/RANGER-5418?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Bhavesh Amre resolved RANGER-5418.
----------------------------------
    Fix Version/s: 3.0.0
       Resolution: Fixed

> Development to Disable Server Version Disclosure in HTTP Responses for Ranger 
> KMS
> ---------------------------------------------------------------------------------
>
>                 Key: RANGER-5418
>                 URL: https://issues.apache.org/jira/browse/RANGER-5418
>             Project: Ranger
>          Issue Type: Sub-task
>          Components: kms
>    Affects Versions: 3.0.0
>            Reporter: Bhavesh Amre
>            Assignee: Bhavesh Amre
>            Priority: Minor
>             Fix For: 3.0.0
>
>
> Ranger KMS is currently exposing the Tomcat server version in HTTP response 
> headers. This leads to information disclosure and can help attackers identify 
> underlying platform vulnerabilities.
> The goal is to disable or hide the server version in all HTTP responses from 
> Ranger KMS to improve security and comply with best practices.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to