Configure "Host:" header when scanning web applications

There is no solution required for this issue, AFAICT virtual host scanning via HTTP and the relevant Host header should work out of the box since ever. There could be still some environmental factors playing a role but maybe some one else with more knowledge on this topic will provide some guidance on the correct / required scan configuration here.

SSL/SNI is completely unrelated to this topic and separately tracked / discussed in Greenbone is not detecting the problem

1 Like