Couchbase Sync Gateway Showing Version; Bad Security


#1

I noticed when I go to my www.mydomain.com:4984, it shows the couchbase sync gateway version:

{"couchdb":"Welcome","vendor":{"name":"Couchbase Sync Gateway","version":1.2},"version":"Couchbase Sync Gateway/1.2.0(79;9df63a5)"}

This is generally seen as a security weakness, because the version can be used to find appropriate exploits. How can this be turned off?

Thank you for your time and assistance.


#2

Hi, the easiest way to turn it off would probably to use a web server in front of the sync gateway and redirect or forbid access to that page.
That being said sync gateway is open source, you can open an issue on our Github project page: https://github.com/couchbase/sync_gateway

Thanks!