Kategori: Remediation Guides
How to Fix ProxyLogon (CVE-2021-26855) on Exchange Server
ProxyLogon (CVE-2021-26855) is a server-side request forgery flaw in on-premises Exchange Server 2013, 2016 and 2019 that lets an unauthenticated attacker who…
DNS Server Cache Snooping: How to Fix Nessus 12217 on BIND and Windows DNS
DNS server cache snooping means your DNS server answers non-recursive queries for third-party domains from its cache, so anyone who can query…
How to Fix Dirty Pipe (CVE-2022-0847) on Linux Hosts
Dirty Pipe (CVE-2022-0847) is a Linux kernel flaw, present in upstream kernels from 5.8, that lets an unprivileged local user overwrite the…
How to Fix CVE-2013-3900: Set EnableCertPaddingCheck (Nessus 166555, Qualys QID 378332)
CVE-2013-3900 is a WinVerifyTrust flaw that lets an attacker add code to a signed Windows executable without breaking its Authenticode signature. Nessus…
How to Fix “Web Application Potentially Vulnerable to Clickjacking” (X-Frame-Options and CSP frame-ancestors)
The Nessus finding “Web Application Potentially Vulnerable to Clickjacking” means your web server returns pages without an X-Frame-Options header or a Content-Security-Policy…
How to Fix CVE-2023-20198: Cisco IOS XE Web UI Privilege Escalation (Nessus 183167)
CVE-2023-20198 is a critical (CVSS 10.0) flaw in the Cisco IOS XE web UI that lets an unauthenticated attacker create a privilege…
How to Fix CVE-2020-3452: Cisco ASA and FTD WebVPN Path Traversal
CVE-2020-3452 is an unauthenticated, read-only path traversal in the web services interface of Cisco ASA and Firepower Threat Defense (FTD) software, reachable…
How to Fix cisco-sa-20170629-snmp (CVE-2017-6742) on Cisco IOS and IOS XE
The cisco-sa-20170629-snmp finding means a Cisco IOS or IOS XE device runs a release affected by nine SNMP buffer overflows, including the…
CentOS 7 End of Life: How to Fix the CentOS SEoL (7.x) Finding
CentOS SEoL (7.x) is a Nessus finding that means the host runs CentOS Linux 7, which reached end of life on June…
How to Fix CVE-2017-5638: Apache Struts Jakarta Multipart Parser RCE (Nessus 97610)
CVE-2017-5638 is a critical remote code execution flaw in the Jakarta Multipart parser of Apache Struts 2.3.5 to 2.3.31 and 2.5 to…