Internal IP Address Disclosure
Severity: Low
Summary #
Invicti identified a Possible Internal IP Address Disclosure in the page.
It was not determined if the IP address was that of the system itself or that of an internal network.
Impact #
There is no direct impact; however, this information can help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabilities.
Remediation #
First, ensure this is not a false positive. Due to the nature of the issue, Netsparker could not confirm that this IP address was actually the real internal IP address of the target web server or internal network. If it is, consider removing it.
Classifications #
CWE-200; ISO27001-A.18.1.4; OWASP 2013-A6; OWASP 2017-A3
Further Reading #
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
