My Oracle Support Banner

How to Remove X-Powered-By header from the response to Prevent Information Disclosure about Application Architecture (Doc ID 2552928.1)

Last updated on SEPTEMBER 30, 2019

Applies to:

Oracle FLEXCUBE Direct Banking - Version DB 12.0.1 to DB 12.0.3 [Release DB 12]
Information in this document applies to any platform.

Goal

Information Disclosure includes header parameter assigned by WebLogic called 'X-Powered-By' with the value of 'Servlet/2.5 JSP/2.1'.

How to Prevent Information Disclosure about Application Architecture from Potential Hackers ?


 

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.