Skip to main content
NetApp Knowledge Base

Vulnerability "Apache HTTP Server Version Exposed" reported on CVO node

  1. Last updated
  2. Save as PDF
Views:
41
Visibility:
Public
Votes:
0
Category:
cloud-volumes-ontap-cvo
Specialty:
cloud_provider_agnostic
Last Updated:

Applies to

Cloud Volume ONTAP

Issue

The below vulnerability reported on the CVO node management IP address regarding the Apache HTTP Server.
Vulnerability : Apache HTTP Server Version Exposed
Plugin Output: 
  URL        : http://<CVO-Node-ManagermentIP:443/
  Version    : unknown
  Source     : Server: Apache
  backported : 0
   
Decription : A remote host is running with Apache which Information & version is exposed.
A remote host is disclosing Apache & version information which related exploits or vulnreability can be attempted to hack from an attacker. Please remove the information of Apache Information & version from banner and header.

We performed validation checks on the identified IP’s address and confirmed that the NetApp Cloud Volumes ONTAP (CVO) system is not exposed to the Internet.

During pentesting, we observed that the externally reachable service is an Apache web server responding on port 443. The server returns an HTTP 303 redirect to the /sysmgr/v4/ path, which indicates a web service endpoint.

  • No direct or indirect public Internet access to the CVO management interface was identified.
  • This finding is therefore assessed as Not Internet Exposed.

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.