topic VMWare Health Analyzer appliance vulnerability in Virtual Appliances Discussions https://communities.vmware.com/t5/Virtual-Appliances-Discussions/VMWare-Health-Analyzer-appliance-vulnerability/m-p/2294033#M8537 <HTML><HEAD></HEAD><BODY><P>We have built VMWare Health Analyzer appliance from image provided by VMWare. This appliance automates the collection of VMWare Inventory, configuration and utilization data.</P><P></P><P></P><P>Qualys Scan is reporting vulnerability with this appliance. Here is the detail; please help us remediate this issue.</P><P></P><P></P><P>HTTP Security Header Not Detected</P><P></P><P></P><P>X-Frame-Options or Content-Security-Policy: frame-ancestors HTTP Headers missing on port 8080.</P><P></P><P></P><P>GET / HTTP/1.1</P><P>Host: pvmhchka1.theocc.com:8080</P><P>Connection: Keep-Alive</P><P></P><P></P><P></P><P></P><P></P><P></P><P>HTTP/1.1 200</P><P>Accept-Ranges: bytes</P><P>ETag: W/"98-1553772262000"</P><P>Last-Modified: Thu, 28 Mar 2019 11:24:22 GMT</P><P>Content-Type: text/html</P><P>Content-Length: 98</P><P>Date: Sun, 07 Jun 2020 02:29:45 GMT</P><P></P><P></P><P>X-XSS-Protection HTTP Header missing on port 8080.</P><P></P><P></P><P>X-Content-Type-Options HTTP Header missing on port 8080.</P></BODY></HTML> Fri, 12 Jun 2020 18:52:44 GMT khparikh 2020-06-12T18:52:44Z VMWare Health Analyzer appliance vulnerability https://communities.vmware.com/t5/Virtual-Appliances-Discussions/VMWare-Health-Analyzer-appliance-vulnerability/m-p/2294033#M8537 <HTML><HEAD></HEAD><BODY><P>We have built VMWare Health Analyzer appliance from image provided by VMWare. This appliance automates the collection of VMWare Inventory, configuration and utilization data.</P><P></P><P></P><P>Qualys Scan is reporting vulnerability with this appliance. Here is the detail; please help us remediate this issue.</P><P></P><P></P><P>HTTP Security Header Not Detected</P><P></P><P></P><P>X-Frame-Options or Content-Security-Policy: frame-ancestors HTTP Headers missing on port 8080.</P><P></P><P></P><P>GET / HTTP/1.1</P><P>Host: pvmhchka1.theocc.com:8080</P><P>Connection: Keep-Alive</P><P></P><P></P><P></P><P></P><P></P><P></P><P>HTTP/1.1 200</P><P>Accept-Ranges: bytes</P><P>ETag: W/"98-1553772262000"</P><P>Last-Modified: Thu, 28 Mar 2019 11:24:22 GMT</P><P>Content-Type: text/html</P><P>Content-Length: 98</P><P>Date: Sun, 07 Jun 2020 02:29:45 GMT</P><P></P><P></P><P>X-XSS-Protection HTTP Header missing on port 8080.</P><P></P><P></P><P>X-Content-Type-Options HTTP Header missing on port 8080.</P></BODY></HTML> Fri, 12 Jun 2020 18:52:44 GMT https://communities.vmware.com/t5/Virtual-Appliances-Discussions/VMWare-Health-Analyzer-appliance-vulnerability/m-p/2294033#M8537 khparikh 2020-06-12T18:52:44Z