Web Server HTTP Header Internal IP Disclosure

low Nessus 插件 ID 10759

语言：

全新！漏洞优先级评级 (VPR)

Tenable 测算每个漏洞的动态 VPR。VPR 将漏洞信息与威胁情报和机器学习算法相结合，预测哪些漏洞最有可能在攻击中被利用。了解详细信息： VPR 的定义及其与 CVSS 的区别。

VPR 得分： 2.2

简介

This web server leaks a private IP address through its HTTP headers.

描述

This may expose internal IP addresses that are usually hidden or masked behind a Network Address Translation (NAT) Firewall or proxy server.

There is a known issue with Microsoft IIS 4.0 doing this in its default configuration. This may also affect other web servers, web applications, web proxies, load balancers and through a variety of misconfigurations related to redirection.