An internal IP address was returned within the response HTML. While not always visible in the rendered HTML, it was visible within the HTML source.
- is blocked by
-
ST-169 Internal IP revealed-related to ST-107
-
- Closed
-
Assigning to Zeeshan
Zeeshan Chishty (Inactive)
added a comment - Not Verified as Internal IP addresses was revealed in error response to Employee Feedback file upload and sent mail.
But when tested in Praetorian Identified vulnerable response the issue is fixed for below page.
/BenAdmin/UserDetails/UserDetails/IncompleteEnrollmentNotification
Zeeshan Chishty (Inactive)
added a comment - Not Verified as Internal IP addresses was revealed in error response to Employee Feedback file upload and sent mail.
But when tested in Praetorian Identified vulnerable response the issue is fixed for below page.
/BenAdmin/UserDetails/UserDetails/IncompleteEnrollmentNotification We were not able to reproduce this issue. So, please approve implemented issue for stage
Hi Rakesh Roy We can close this ticket as we are not able to reproduce this issue.
When tested in Praetorian Identified vulnerable response page the issue is fixed and no internal IP is revealed.
Zeeshan Chishty (Inactive)
added a comment - Hi Rakesh Roy We can close this ticket as we are not able to reproduce this issue.
When tested in Praetorian Identified vulnerable response page the issue is fixed and no internal IP is revealed. as per above comments closing this ticket
Make it ready for stage for implemented change.
For more discussion approach me.
Kindly discuss with Niteen for more details
Hi Niteen Surwase,
We have verified the mentioned change on local (wt-stage), we inspected the mentioned pages and check whether internal IP is displaying anywhere. After fix internal IP address is not displaying anywhere. Along with this we have also perform sanity testing for mentioned pages as well, no issue found during sanity. We can deploy the change to Stage.
Kunal Kedari (Inactive)
added a comment - Hi Niteen Surwase ,
We have verified the mentioned change on local (wt-stage), we inspected the mentioned pages and check whether internal IP is displaying anywhere. After fix internal IP address is not displaying anywhere. Along with this we have also perform sanity testing for mentioned pages as well, no issue found during sanity. We can deploy the change to Stage. 
In earlier scenarios Server IPs were visible in following files. This is resolved in this ticket.
Please check following File Paths :
1. AddXpress Company module - Upload logo and check for IP by inspecting logo.
2. ConfigureLandingPage - Upload Image and check for IP by inspecting Image.
3. IncompleteEnrollmentNotifications - Upload File and check for IP by inspecting file link.