Search Results

Follow the steps below to remediate this finding on WordPress. Disable the Last-Modified and ETag headers if not needed for caching:In functions.php:remove_action('wp_head', 'wp_generator'); add_filter('wp_headers', function($headers) { unset($headers['Last-Mo...

Follow the steps below to remediate this finding on Joomla. In Joomla's Global Configuration, disable caching or set the Cache-Control headers appropriately to avoid exposing file modification timestamps.Review template output and component responses for raw U...

Follow the steps below to remediate this finding on Drupal. In Drupal's performance settings (Admin > Configuration > Development > Performance), review caching settings.Use the Page Cache module configuration to control cache headers and avoid leaking timesta...

Follow the steps below to remediate this finding on Microsoft IIS webserver. Use IIS Crypto to disable TLS 1.0.Open IIS Crypto, select the "Best Practices" template or manually uncheck TLS 1.0 under the Protocols section.Click Apply and reboot the server.Alter...

Follow the steps below to remediate this finding on Nginx webserver. In nginx.conf, update ssl_protocols to exclude TLS 1.0:ssl_protocols TLSv1.2 TLSv1.3;Reload Nginx:sudo systemctl reload nginx

Follow the steps below to remediate this finding on Apache webserver. In the Apache SSL configuration, update SSLProtocol to exclude TLS 1.0:SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1Reload Apache:sudo systemctl reload apache2

Follow the steps below to remediate this finding on Plesk. Log in to the Plesk control panel.Navigate to Domains > your domain > Apache & nginx Settings.Under "Additional nginx directives", add:ssl_protocols TLSv1.2 TLSv1.3;Click Apply.

Follow the steps below to remediate this finding on Microsoft IIS webserver. Use IIS Crypto to disable TLS 1.1.Open IIS Crypto and uncheck TLS 1.1 under the Protocols section.Click Apply and reboot the server.Alternatively, via the registry:[HKEY_LOCAL_MACHINE...

Follow the steps below to remediate this finding on Nginx webserver. In nginx.conf, update ssl_protocols:ssl_protocols TLSv1.2 TLSv1.3;Reload Nginx:sudo systemctl reload nginx