Kategori: Remediation Guides
How to Disable SMTP VRFY and EXPN (Nessus 10249)
Multiple Mail Server EXPN/VRFY Information Disclosure (Nessus plugin 10249) means your SMTP server answers VRFY or EXPN in a way that confirms…
SMTP Service Cleartext Login Permitted: How to Fix Nessus 54582
SMTP Service Cleartext Login Permitted (Nessus plugin 54582) means your mail server offers SMTP AUTH with PLAIN or LOGIN before the connection…
SMB NULL Session Authentication: How to Disable Null Sessions and Guest Access on Windows and Samba
SMB NULL session authentication means a Windows or Samba host accepts an SMB connection with an empty username and password and lets…
Kubernetes Clusters Should Disable Automounting API Credentials: How to Fix It
Kubernetes clusters should disable automounting API credentials is a Microsoft Defender for Cloud recommendation raised when pods have a service account token…
RPC Portmapper Service Detection (Nessus 10223): How to Disable or Restrict rpcbind
RPC portmapper Service Detection (Nessus plugin 10223) means the host answers ONC RPC portmapper queries on TCP or UDP port 111, which…
Store Passwords Using Reversible Encryption: How to Find and Fix It in Active Directory
Reversible Passwords means Active Directory is allowed to keep some passwords in a form that can be decrypted back to plaintext, either…
How to Disable the Remote Registry Service (CIS Check) Without Breaking Credentialed Scans
“Ensure ‘Remote Registry (RemoteRegistry)’ is set to ‘Disabled'” is a CIS benchmark check that fails when the Windows Remote Registry service has…
RDS Publicly Accessible (Security Hub RDS.2): How to Make an RDS Database Private Without Breaking Clients
An RDS publicly accessible finding (Security Hub control RDS.2) means a DB instance has PubliclyAccessible set to true, giving it a public…
Privileged Containers Should Be Avoided: How to Find and Fix It in Kubernetes, Docker and ECS
“Privileged containers should be avoided” means a Kubernetes pod, Docker container or Amazon ECS task definition runs in privileged mode, giving it…
PHP expose_php Information Disclosure: How to Set expose_php Off
PHP expose_php Information Disclosure means PHP is announcing itself: it adds an X-Powered-By: PHP/x.y header to responses and, on PHP 5.4 and…