Remediation Steps

Follow the steps below to remediate this finding on Apache webserver.

1. Disable PHP version exposure in php.ini:

2. expose_php = Off

3. To also suppress the header at the Apache level, ensure mod_headers is enabled and add:

   Header unset X-Powered-By
   Header always unset X-Powered-By

4. Reload Apache:

   sudo systemctl reload apache2