entry.md

aliases	category	classification	date	date_modified	draft	id	image	links	local_archive_links	pinned	print	series	tags	title	type
hide-apache-tomcat-version-details	tomcat	public	2020-10-10 04:57:30 -0700	2020-10-10 04:57:30 -0700	false	20201010115730				false	false		apache security tomcat version	Hide Tomcat Version Details on 404 Page	tech-note

It's important to hide the version of Tomcat that is being used to ensure the baddies are unsure!

Create a new set of directories under the Tomcat lib directory:

mkdir -p /opt/apache/tomcat/lib/org/apache/catalina/util

Then create a new file under the newly created util directory called ServerInfo.properties, and copy the below into it:

server.info=

The server.info property takes a string, but it's better to have no information on version at all, so the above hides it completely.

Then restart Tomcat, and if you enter a bad request the version will not be included.