Description This web server appears to be in a default configuration. Default configurations of web servers often provide too much information about their platform and version in HTTP headers and on error pages. This data is not itself dangerous, but it can help an attacker focus on vulnerabilities associated with your specific web server platform/version.

Effort to Fix: 1 - Trivial implementation error. Fix is up to 5 lines of code. One hour or less to fix.

Recommendations Configure your web server to avoid having it announce its own details. For example in Apache, these two configuration directives should be added to the configuration file: "ServerSignature Off" and "ServerTokens Prod". Utilize URLScan and IISLockdown for Microsoft's IIS web server