Spring Actuator Information Leak

  • 警报等级:

  • Medium

  • 警报类型:
  • Active
摘要

Spring Actuator for Health is enabled and may reveal sensitive information about this application. Spring Actuators can be used for real monitoring purposes, but should be used with caution as to not expose too much information about the application or the infrastructure running it.

解决方案

Disable the Health Actuators and other actuators, or restrict them to administrative users.

参考

https://docs.spring.io/spring-boot/docs/current/actuator-api/htmlsingle/#overview