Skip to main content
P
PN_96718071-Visitor
1-Visitor
February 22, 2021
Question

Disabling server or platform version information returned in HTTP headers

  • February 22, 2021
  • 2 replies
  • 1120 views

How to disable the Apache Tomcat version returned in HTTP headers while loading Thingworx.

2 replies

O
odukiya16-Pearl
16-Pearl
February 22, 2021

Hello @PN_9671807 

 

I am confused regarding your question here. DO you mean that you want to disable tomcat version info in http errors returned by thingworx?

Please refer following article and please feel free to revert in case it doesn't resolve your problem.

https://www.ptc.com/en/support/article/CS300879

 

Thanks

Om Dukiya

P
PN_96718071-VisitorAuthor
1-Visitor
February 22, 2021

Hi,

 

Thanks for the response.

My issue is we have performed an Vulnerability Test on Sever where Apache tomcat/Thingworx is running and as part of Assessment, the Security Team suggested these things need to be corrected:

apache server disclosed on below resolved IP and Best practices recommend is disabling server and/or platform version information returned in HTTP headers.

Terms & ConditionsAccessibility statement