Remediation Steps

Follow the steps below to remediate this finding on Apache webserver.

1. In apache2.conf or httpd.conf, set:

   ServerTokens Prod
   ServerSignature Off
   ServerTokens Prod reduces the Server header to just "Apache" without version details.

2. Reload Apache:

   sudo systemctl reload apache2