Web Server Reverse Proxy Detection Vulnerability [ Edited ]

[#1]

Hi Team,

one of my project , client scan all DDI Environment and send to to me the following vulnerability

• The remote web server seems to allow any anonymous user to use it as a reverse proxy.  This may expose internal services to potential mapping and, henceforth, compromise and the solution should be Disable or restrict access the reverse proxy

anyone face this before ?

[#2]

---

@imorsyhappyhour wrote:

Hi Team,

one of my project , client scan all DDI Environment and send to to me the following vulnerability

• The remote web server seems to allow any anonymous user to use it as a reverse proxy.  This may expose internal services to potential mapping and, henceforth, compromise and the solution should be Disable or restrict access the reverse proxy

anyone face this before ?

---

Yes, this vulnerability indicates that your web server is configured as a reverse proxy, allowing unauthorized access to internal services. To address this issue, you should disable the reverse proxy feature or restrict access to it by implementing proper authentication and authorization measures.

[#3]

---

@imorsy wrote:

Hi Team,

one of my project , client scan all DDI Environment and send to to me the following vulnerability

• The remote web server seems to allow any anonymous user to use it as a reverse proxy.  This may expose internal services to potential mapping and, henceforth, compromise and the solution should be Disable or restrict access the reverse proxy

anyone face this before ?

---

Hello,
A client identified a vulnerability where the remote web server allows anonymous access as a reverse proxy, potentially exposing internal services. Has anyone encountered this issue before?

Best regards,
Daniel Lopez