Description

Detects information disclosure vulnerabilities where backend server details are exposed through the X-Backend-Server HTTP response header. This header can reveal sensitive infrastructure information that could aid attackers in targeting the system.

Detection Strategy

• Checks HTTP response headers for presence of the X-Backend-Server header

• Reports a vulnerability if the X-Backend-Server header is present in the response

• Vulnerability is triggered regardless of the header value content - the mere presence of the header is considered a security risk