Kategori: Remediation Guides
Web Server HTTP Dangerous Method Detection: How to Disable PUT, DELETE and WebDAV
Web Server HTTP Dangerous Method Detection (Nessus plugin 10498) means a web server accepted PUT or DELETE requests, so a client may…
DNS Server Recursive Query Cache Poisoning Weakness: How to Fix Nessus 10539
DNS Server Recursive Query Cache Poisoning Weakness means your DNS server resolves names on behalf of any client that can reach it,…
Cisco Smart Install Detection: How to Disable It with no vstack and Block TCP 4786
Cisco Smart Install Detection means a Cisco IOS or IOS XE switch is still running Smart Install, a zero-touch provisioning protocol with…
How to Fix BIND Version Disclosure (Nessus 10028): Hide version.bind in named.conf
BIND version disclosure means your DNS server answers a CHAOS-class TXT query for version.bind with its software version, which Nessus reports as…
Trace.axd Information Disclosure: How to Disable ASP.NET Tracing
Trace.axd information disclosure means an ASP.NET application has application-level tracing turned on and lets remote visitors open the trace viewer, which lists…
Anonymous FTP Enabled: How to Disable Anonymous and Cleartext FTP Logins
Anonymous FTP Enabled means your FTP server lets anyone log in as “anonymous” or “ftp” with no real password; its companion finding…
AlwaysInstallElevated: How to Find and Disable It (CIS, Wazuh and STIG Findings)
AlwaysInstallElevated is a Windows Installer policy that, when set to 1 in both HKLM and HKCU under SOFTWAREPoliciesMicrosoftWindowsInstaller, makes every MSI package…
SPF Record Missing: How to Create, Publish and Verify a Correct SPF Record
An “SPF record missing” finding means the scanner queried your domain’s DNS and found no TXT record beginning with v=spf1, so receiving…
How to Fix S3.5: Require TLS with an aws:SecureTransport Bucket Policy
Security Hub control S3.5 fails when an S3 general purpose bucket has no policy statement that explicitly denies requests sent over plain…
Protected Users Group Not Used: How to Add Admins Without Locking Them Out
“Protected Users Group Not Used” means privileged Active Directory accounts are not members of the built-in Protected Users group, so their credentials…