365 – Avoid exposing technical information
Summary
Technical information (product name, version, configuration) of exposed services should not be accessible.
Description
Attackers usually perform reconnaissance to gather information about the target system. Exposing detailed technical information makes it easier for attackers to identify potential vulnerabilities or outdated software versions that may have known security issues.
Supported In
Advanced: True
References
Last updated
2024/01/18