Kategori: Remediation Guides
How to Disable WinRM Basic Authentication (WN10-CC-000330 and WN10-CC-000345)
The WinRM Basic authentication finding (DISA STIG WN10-CC-000330 for the WinRM client, WN10-CC-000345 for the WinRM service) means no policy stops Windows…
Windows Explorer AutoPlay Not Disabled: Fix QID 105170 and 105171
Microsoft Windows Explorer AutoPlay Not Disabled means Windows acts automatically when removable or optical media is inserted, because the AutoPlay values are…
Microsoft Windows SMB Registry : Autologon Enabled (Nessus 10412): How to Disable Autologon and Remove DefaultPassword
Microsoft Windows SMB Registry : Autologon Enabled (Nessus plugin 10412) means Windows is configured to sign an account in automatically at startup,…
How to Disable Directory Listing (Browsable Web Directories, Nessus 40984)
Browsable Web Directories (Nessus plugin 40984) means your web server returns an automatically generated file listing when someone requests a folder that…
How to Fix Web Server Error Page Information Disclosure (Nessus 88490, ZAP 90022)
Web Server Error Page Information Disclosure means your web server or application returns a default or debug error page that reveals details…
UPnP Protocol Detection (Nessus 35711): How to Disable UPnP and SSDP
Universal Plug and Play (UPnP) Protocol Detection is an informational Nessus finding (plugin 35711) raised when a device answers SSDP discovery requests…
Ghostcat CVE-2020-1938: How to Disable or Secure the Tomcat AJP Connector
Ghostcat (CVE-2020-1938) is a flaw in Apache Tomcat’s AJP connector, normally on port 8009, that lets an unauthenticated attacker read files inside…
How to Disable TLS 1.0 and 1.1: Fixing TLS Version 1.0 Protocol Detection and TLS 1.1 Deprecated Protocol
TLS Version 1.0 Protocol Detection and TLS Version 1.1 Deprecated Protocol mean a service accepts handshakes using TLS 1.0 or 1.1, both…
TFTP Daemon Detection (Nessus 11819): Disable or Lock Down TFTP
TFTP Daemon Detection (Nessus plugin 11819) means a host answers Trivial File Transfer Protocol requests on UDP port 69, with no authentication…
How to Disable Teredo and Fix Nessus “Teredo Server Detection” (Plugin 23972)
Teredo Server Detection (Nessus plugin 23972) means a host answered a Teredo router solicitation on UDP 3544, so it is acting as…