webserver version disclosure in Jira

[vivekrao_k]

HI Everyone,

We are using Jira 8.13.4 version which we access through server.

We noticed when we access our Jira environment using http port instead of https in private window , it is disclosing the web server version. we had implemented some changes and fixed the issue.

now when we try with private window it is not showing any webserver version. BUT here is the question.

while performing retest using interceptor tool like burp software we can still notice that webserver version is disclosed. could one of you please suggest effective changes needs to be done to mitigate this vulnerability .

Thanks in advance.

Vivek