ICEfaces
  1. ICEfaces
  2. ICE-11532

Remove "X-Powered-By: ICEfacesEE" HTTP header

    Details

    • Type: Improvement Improvement
    • Status: Resolved
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: EE-3.3.0.GA, EE-4.3.0.GA
    • Component/s: Framework
    • Labels:
      None
    • Environment:
      ICEfaces EE

      Description

      The "X-Powered-By: ICEfacesEE" HTTP header reveals that the application uses the ICEFacesEE, which may be used to attackers to formulate an attack.

      This is considered to be a security vulnerability.

      This JIRA is to remove this header from the ICEfaces EE products.

        Activity

        Ken Fyten created issue -
        Ken Fyten made changes -
        Field Original Value New Value
        Fix Version/s EE-4.3.0.GA_P04 [ 13876 ]
        Fix Version/s EE-3.3.0.GA_P10 [ 13877 ]
        Ken Fyten made changes -
        Assignee Ken Fyten [ ken.fyten ]
        Ken Fyten made changes -
        Assignee Ken Fyten [ ken.fyten ] Arturo Zambrano [ artzambrano ]
        Arturo Zambrano made changes -
        Status Open [ 1 ] Resolved [ 5 ]
        Resolution Fixed [ 1 ]

          People

          • Assignee:
            Arturo Zambrano
            Reporter:
            Ken Fyten
          • Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: