Forum Discussion

jmasgalas's avatar
jmasgalas
Icon for Nimbostratus rankNimbostratus
Mar 03, 2020

Web Server HTTP Header Internal IP Disclosure

One of my virtual servers returns the vulnerability Web Server HTTP Header Internal IP Disclosure during a Nessus scan. Security is asking me to fix this but I am not sure how. I tried creating a tra...
BIG-IP
IP leak
iRules
issue
Nessus
security
jmasgalas's avatar
jmasgalas
Icon for Nimbostratus rankNimbostratus
Mar 05, 2020

I was able to work around this by implementing the below irule but then the application breaks. Anyone have any ideas on how to remediate the vulnerability but keep the web site working?

 

when HTTP_RESPONSE {  

   if { [HTTP::header is_redirect]} {  

    HTTP::header replace Location \  

      [string map -nocase "https://x.x.x.x/vipssp/ https://securitycode.summithealth.org/vipssp/" [HTTP::header value Location]]  

   }  

 }