[KNOX-2256] Showing jetty version on error handling causing Improper error handling as a security vulnerability

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Component/s: Server
• Environment: centos os
• Assignee: Kevin Risden
• Reporter: Rajashekhar Meesala
• Created: 02/Mar/20 10:16
• Updated: 10/Mar/20 20:27
• Resolved: 02/Mar/20 15:03

Description

Hi Team,

Showing jetty version on error handling causing Improper error handling as security vulnerability which is our current blocker for production with knox. Kindly provide a way to hide this jetty version.

Issue Links

• duplicates: KNOX-932 Option to remove the server-name from HTTP-header response
• relates to: KNOX-2257 Documentation for KNOX-932 / KNOX-2285 gateway.server.header.enabled