Baikal: Version number leak

Created on 11 Mar 2017  路  2Comments  路  Source: sabre-io/Baikal

It would be great if Ba茂kal would refrain leaking its version number to non-authenticated users (eg. on the /admin page).

Rationale: this makes it easy to know if an installed version is vulnerable against vulnerabilities that have been already fixed in previous versions.

Most helpful comment

Really unimportant.

All 2 comments

Really unimportant.

I am closing this ticket. I realize there can be some security benefits, but I don't think it's important enough to try and fix right now.

Was this page helpful?
0 / 5 - 0 ratings

Related issues

0xErnie picture 0xErnie  路  8Comments

GrayGhost93 picture GrayGhost93  路  5Comments

jvoisin picture jvoisin  路  3Comments

urmel1960 picture urmel1960  路  4Comments

FelixR2002 picture FelixR2002  路  7Comments