How can I remove "aswelb/2.0" in the HTTP Response Header?

2

Enter image description here

How can I remove that "awselb/2.0" in the HTTP Response Server Header?

已提問 1 年前檢視次數 13011 次
3 個答案
2

Note AWS team this is being reported by Penetration Testing firms as an information disclosure vulnerability. Request that action is taken to address..

Dave
已回答 8 個月前
0

Unfortunately, there is no option to remove the header at this time. If you deploy 3rd Party Solution like F5 WAF, you can cloak server information.

profile pictureAWS
已回答 1 年前
  • Can we hide or change that awselb/2.0 to other name.

0

It's not customizable at the moment. A workaround would be to front the ALB with CloudFront and use edge functions to override the Server header with none, as briefly illustrated here: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/lambda-examples.html#lambda-examples-overriding-response-header

AWS
weidi
已回答 1 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南