-
Improvement
-
Resolution: Unresolved
-
Major
-
4.9.4, 4.10.0
-
None
-
4.10 M3
Best practices advises against exposing version number in application to avoid displaying the potential vulnerability your are exposed to based on the version of the application and its components.
The Ametys version should at least be restricted to authenticated user in BO (to be no worse than the information displayed in About).
Version of component like Tomcat, Cocoon and such should probably never been exposed, but at least never in production mode.