Response headers may reveal software versions, internal IPs, or other metadata useful for reconnaissance.
Sensitive Metadata Is Exposed via HTTP Headers
CCC.LB.TH06
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.LB.CP19 | Request and Response Header Transformations | The service can modify HTTP headers of both incoming requests and outgoing responses. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.LB.CN07 | Scrub Sensitive Headers | Remove headers that disclose internal details or software versions from HTTP responses. |