Details
-
Type:
Improvement
-
Status: Resolved
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: EE-3.3.0.GA, EE-4.3.0.GA
-
Fix Version/s: EE-4.3.0.GA_P04, EE-3.3.0.GA_P10
-
Component/s: Framework
-
Labels:None
-
Environment:ICEfaces EE
Description
The "X-Powered-By: ICEfacesEE" HTTP header reveals that the application uses the ICEFacesEE, which may be used to attackers to formulate an attack.
This is considered to be a security vulnerability.
This JIRA is to remove this header from the ICEfaces EE products.
This is considered to be a security vulnerability.
This JIRA is to remove this header from the ICEfaces EE products.
Activity
- All
- Comments
- History
- Activity
- Remote Attachments
- Subversion
Field | Original Value | New Value |
---|---|---|
Fix Version/s | EE-4.3.0.GA_P04 [ 13876 ] | |
Fix Version/s | EE-3.3.0.GA_P10 [ 13877 ] |
Assignee | Ken Fyten [ ken.fyten ] |
Assignee | Ken Fyten [ ken.fyten ] | Arturo Zambrano [ artzambrano ] |
Status | Open [ 1 ] | Resolved [ 5 ] |
Resolution | Fixed [ 1 ] |