rspec/rules/S5689/description.adoc

13 lines
657 B
Plaintext
Raw Permalink Normal View History

Disclosure of version information, usually overlooked by developers but disclosed by default
by the systems and frameworks in use, can pose a significant security risk
depending on the production environement.
Once this information is public, attackers can use it to identify potential
security holes or vulnerabilities specific to that version.
Furthermore, if the published version information indicates the use of outdated
or unsupported software, it becomes easier for attackers to exploit known
vulnerabilities. They can search for published vulnerabilities related to that
version and launch attacks that specifically target those vulnerabilities.