<link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=7975199447131874550&zx=760534d9-1ce4-4510-a7d7-6a882e368569' media='none' onload='if(media!='all')media='all'' rel='stylesheet'/><noscript><link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=7975199447131874550&zx=760534d9-1ce4-4510-a7d7-6a882e368569' rel='stylesheet'/></noscript>
<meta name='google-adsense-platform-account' content='ca-host-pub-1556223355139109'/>
<meta name='google-adsense-platform-domain' content='blogspot.com'/>

<!-- data-ad-client=ca-pub-8669036782105267 -->

</head><body>

More

http 오류 메시지 나올 때 Tomcat 버전 숨기기

5월 13, 2024 - (Updated: 5월 16, 2024)

콜드카드

Tomcat 에러메시지 버전 표시

에러메시지에 표시되는 톰캣 버전

최근 보안 사항들을 점검하다 HTTP 오류 메시지 응답 페이지에 Tomcat 서버 버전이 노출 될 경우 보안 취약점으로 사용되기 때문에 가려야 한다는 것을 알게 되었습니다.

Tomcat 버전 숨기기

버전을 숨기는 방법이 2가지 있는데 ServerInfo.properties 파일을 설정 하는 방법과 conf 폴더의 web.xml 파일을 수정하는 방법 2가지가 있습니다.

web.xml 파일에 추가하는 방법이 간단하기 때문에 파일을 수정하기로 했습니다.

1. web.xml 파일의 하단부로 내려가 <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"> 태그를 찾습니다.

2. AccessLogValve 아래쪽에 ErrorReportValve 태그를 추가 합니다.

<valve classname="org.apache.catalina.valves.ErrorReportValve" showreport="false" showserverinfo="false"></valve>

ErrorReportValve 태그 추가

web.xml 파일에 ErrorReportValve 태그 추가한 모습

3. 추가 후 톰캣을 재시작 하고 다시 에러 페이지를 띄워 보면 Tomcat 버전이 사라진 걸 볼 수 있습니다.

Tomcat 에러메시지 버전 표시 제거

Tomcat 버전이 사라진 모습

Read Also

공유:

공유

관심 있을 만한 글:

<script type="text/javascript" src="https://www.blogger.com/static/v1/widgets/984859869-widgets.js"></script>
<script type='text/javascript'>
window['__wavt'] = 'AOuZoY7L7YoGBo4uCF_Jax-l8dwUoeS0wQ:1732435021268';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d7975199447131874550','//cold-card.blogspot.com/2024/05/tomcat.html','7975199447131874550');
_WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '7975199447131874550', 'title': '\ucf5c\ub4dc\uce74\ub4dc', 'url': 'https://cold-card.blogspot.com/2024/05/tomcat.html', 'canonicalUrl': 'https://cold-card.blogspot.com/2024/05/tomcat.html', 'homepageUrl': 'https://cold-card.blogspot.com/', 'searchUrl': 'https://cold-card.blogspot.com/search', 'canonicalHomepageUrl': 'https://cold-card.blogspot.com/', 'blogspotFaviconUrl': 'https://cold-card.blogspot.com/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': false, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': '', 'encoding': 'UTF-8', 'locale': 'ko', 'localeUnderscoreDelimited': 'ko', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22\ucf5c\ub4dc\uce74\ub4dc - Atom\x22 href\x3d\x22https://cold-card.blogspot.com/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22\ucf5c\ub4dc\uce74\ub4dc - RSS\x22 href\x3d\x22https://cold-card.blogspot.com/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22\ucf5c\ub4dc\uce74\ub4dc - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/7975199447131874550/posts/default\x22 /\x3e\n\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22\ucf5c\ub4dc\uce74\ub4dc - Atom\x22 href\x3d\x22https://cold-card.blogspot.com/feeds/372260997507019146/comments/default\x22 /\x3e\n', 'meTag': '', 'adsenseClientId': 'ca-pub-8669036782105267', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': true, 'adsenseAutoAds': false, 'boqCommentIframeForm': true, 'loginRedirectParam': '', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/d78375fb222d99b3', 'plusOneApiSrc': 'https://apis.google.com/js/platform.js', 'disableGComments': true, 'interstitialAccepted': false, 'sharing': {'platforms': [{'name': '\uacf5\uc720 \ub9c1\ud06c \ub9cc\ub4e4\uae30', 'key': 'link', 'shareMessage': '\uacf5\uc720 \ub9c1\ud06c \ub9cc\ub4e4\uae30', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Facebook\uc5d0 \uacf5\uc720', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'X', 'key': 'twitter', 'shareMessage': 'X\uc5d0 \uacf5\uc720', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Pinterest\uc5d0 \uacf5\uc720', 'target': 'pinterest'}, {'name': '\uc774\uba54\uc77c', 'key': 'email', 'shareMessage': '\uc774\uba54\uc77c', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 0, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27ko\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': true, 'jumpLinkMessage': 'Read more \xbb', 'pageType': 'item', 'postId': '372260997507019146', 'postImageThumbnailUrl': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjytEIuNChw3DgHxHN9teFUw8jCaMjkiKbgpLlYvfkyZIWhaLr3O5WG1DBStuCtwzKNBRQs1V1AdRwg8bEm2zvDTeqkCHcxjDv47IUeC7Wl1qkMeVPMnLdPkazrtwgYvwHNnVG8ND9xzm9wMvMR03d-F8z3qklh6IOjR2uwk5EE-nJ64IIE1ZQ35epT/s72-w640-c-h274/%ED%86%B0%EC%BA%A3%20%EB%B2%84%EC%A0%84%20%EC%88%A8%EA%B8%B0%EA%B8%B0.png', 'postImageUrl': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjytEIuNChw3DgHxHN9teFUw8jCaMjkiKbgpLlYvfkyZIWhaLr3O5WG1DBStuCtwzKNBRQs1V1AdRwg8bEm2zvDTeqkCHcxjDv47IUeC7Wl1qkMeVPMnLdPkazrtwgYvwHNnVG8ND9xzm9wMvMR03d-F8z3qklh6IOjR2uwk5EE-nJ64IIE1ZQ35epT/w640-h274/%ED%86%B0%EC%BA%A3%20%EB%B2%84%EC%A0%84%20%EC%88%A8%EA%B8%B0%EA%B8%B0.png', 'pageName': 'http \uc624\ub958 \uba54\uc2dc\uc9c0 \ub098\uc62c \ub54c Tomcat \ubc84\uc804 \uc228\uae30\uae30', 'pageTitle': '\ucf5c\ub4dc\uce74\ub4dc: http \uc624\ub958 \uba54\uc2dc\uc9c0 \ub098\uc62c \ub54c Tomcat \ubc84\uc804 \uc228\uae30\uae30', 'metaDescription': 'HTTP \uc624\ub958 \uba54\uc2dc\uc9c0 \uc751\ub2f5 \ud398\uc774\uc9c0\uc5d0 Tomcat \uc11c\ubc84 \ubc84\uc804 \uc228\uae30\uae30'}}, {'name': 'features', 'data': {}}, {'name': 'messages', 'data': {'edit': '\uc218\uc815', 'linkCopiedToClipboard': '\ub9c1\ud06c\ub97c \ud074\ub9bd\ubcf4\ub4dc\uc5d0 \ubcf5\uc0ac\ud588\uc2b5\ub2c8\ub2e4.', 'ok': '\ud655\uc778', 'postLink': '\uae00 \ub9c1\ud06c'}}, {'name': 'template', 'data': {'name': 'custom', 'localizedName': '\uc0ac\uc6a9\uc790 \uc9c0\uc815', 'isResponsive': true, 'isAlternateRendering': false, 'isCustom': true}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': 'http \uc624\ub958 \uba54\uc2dc\uc9c0 \ub098\uc62c \ub54c Tomcat \ubc84\uc804 \uc228\uae30\uae30', 'description': 'HTTP \uc624\ub958 \uba54\uc2dc\uc9c0 \uc751\ub2f5 \ud398\uc774\uc9c0\uc5d0 Tomcat \uc11c\ubc84 \ubc84\uc804 \uc228\uae30\uae30', 'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjytEIuNChw3DgHxHN9teFUw8jCaMjkiKbgpLlYvfkyZIWhaLr3O5WG1DBStuCtwzKNBRQs1V1AdRwg8bEm2zvDTeqkCHcxjDv47IUeC7Wl1qkMeVPMnLdPkazrtwgYvwHNnVG8ND9xzm9wMvMR03d-F8z3qklh6IOjR2uwk5EE-nJ64IIE1ZQ35epT/w640-h274/%ED%86%B0%EC%BA%A3%20%EB%B2%84%EC%A0%84%20%EC%88%A8%EA%B8%B0%EA%B8%B0.png', 'url': 'https://cold-card.blogspot.com/2024/05/tomcat.html', 'type': 'item', 'isSingleItem': true, 'isMultipleItems': false, 'isError': false, 'isPage': false, 'isPost': true, 'isHomepage': false, 'isArchive': false, 'isLabelSearch': false, 'postId': 372260997507019146}}, {'name': 'widgets', 'data': [{'title': 'Template Code (Do not disable)', 'type': 'HTML', 'sectionId': 'settings', 'id': 'HTML3'}, {'title': '\ucf5c\ub4dc\uce74\ub4dc(\ud5e4\ub354)', 'type': 'Header', 'sectionId': 'header', 'id': 'Header1'}, {'title': 'category', 'type': 'LinkList', 'sectionId': 'section', 'id': 'LinkList1'}, {'title': '\ube14\ub85c\uadf8 \uac8c\uc2dc\ubb3c', 'type': 'Blog', 'sectionId': 'main', 'id': 'Blog1', 'posts': [{'id': '372260997507019146', 'title': 'http \uc624\ub958 \uba54\uc2dc\uc9c0 \ub098\uc62c \ub54c Tomcat \ubc84\uc804 \uc228\uae30\uae30', 'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjytEIuNChw3DgHxHN9teFUw8jCaMjkiKbgpLlYvfkyZIWhaLr3O5WG1DBStuCtwzKNBRQs1V1AdRwg8bEm2zvDTeqkCHcxjDv47IUeC7Wl1qkMeVPMnLdPkazrtwgYvwHNnVG8ND9xzm9wMvMR03d-F8z3qklh6IOjR2uwk5EE-nJ64IIE1ZQ35epT/w640-h274/%ED%86%B0%EC%BA%A3%20%EB%B2%84%EC%A0%84%20%EC%88%A8%EA%B8%B0%EA%B8%B0.png', 'showInlineAds': false}], 'headerByline': {'regionName': 'header1', 'items': [{'name': 'share', 'label': ''}, {'name': 'author', 'label': 'Oleh'}, {'name': 'timestamp', 'label': 'pada tanggal'}, {'name': 'labels', 'label': ''}]}, 'footerBylines': [{'regionName': 'footer1', 'items': [{'name': 'comments', 'label': 'Post a Comment'}]}], 'allBylineItems': [{'name': 'share', 'label': ''}, {'name': 'author', 'label': 'Oleh'}, {'name': 'timestamp', 'label': 'pada tanggal'}, {'name': 'labels', 'label': ''}, {'name': 'comments', 'label': 'Post a Comment'}]}, {'title': 'Advertisement', 'type': 'HTML', 'sectionId': 'top_ads', 'id': 'HTML90'}, {'title': 'Advertisement', 'type': 'HTML', 'sectionId': 'bottom_ads', 'id': 'HTML94'}, {'type': 'AdSense', 'sectionId': 'sidebar', 'id': 'AdSense1'}, {'title': '\ud0dc\uadf8', 'type': 'Label', 'sectionId': 'sidebar', 'id': 'Label1'}, {'title': 'Table of Contents', 'type': 'HTML', 'sectionId': 'toc_auto', 'id': 'HTML8'}]}]);
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML3', 'settings', document.getElementById('HTML3'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HeaderView', new _WidgetInfo('Header1', 'header', document.getElementById('Header1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList1', 'section', document.getElementById('LinkList1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'main', document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/610513206-lbx__ko.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/1964470060-lightbox_bundle.css'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML90', 'top_ads', document.getElementById('HTML90'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML94', 'bottom_ads', document.getElementById('HTML94'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_AdSenseView', new _WidgetInfo('AdSense1', 'sidebar', document.getElementById('AdSense1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LabelView', new _WidgetInfo('Label1', 'sidebar', document.getElementById('Label1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML8', 'toc_auto', document.getElementById('HTML8'), {}, 'displayModeFull'));
</script>
</body>