Kategori: Remediation Guides
Ensure Bootloader Password Is Set: How to Fix the CIS GRUB Password Finding
“Ensure bootloader password is set” is a CIS benchmark check that fails when GRUB 2 lets anyone at the console edit boot…
grub.cfg Permissions: Fixing the CIS Bootloader Config Finding
“Ensure permissions on bootloader config are configured” is a CIS benchmark check that fails when grub.cfg permissions give group or other users…
Ensure Permissions on /etc/crontab Are Configured: How to Fix the CIS Finding
Ensure permissions on /etc/crontab are configured is a CIS Linux benchmark check that fails when the system crontab is not owned by…
CWDIllegalInDllSearch: How to Fix MS KB2269637 Insecure Library Loading (Nessus 48762)
MS KB2269637 insecure library loading is a Nessus finding (plugin 48762) raised when Windows is not configured to stop applications loading DLLs…
Container With Privilege Escalation Should Be Avoided: How to Set allowPrivilegeEscalation: false
“Container with privilege escalation should be avoided” means a Kubernetes container does not set securityContext.allowPrivilegeEscalation to false, so its processes can gain…
Account Is Sensitive and Cannot Be Delegated: Fixing “Ensure Privileged Accounts Are Not Delegated”
“Account is sensitive and cannot be delegated” is an Active Directory account option (the NOT_DELEGATED userAccountControl flag, 0x100000) that stops Kerberos from…
VNC Server Unauthenticated Access: How to Fix Nessus Plugin 26925
VNC Server Unauthenticated Access (Nessus plugin 26925) means a VNC server offers the RFB “None” security type, so anyone who reaches the…
Unprotected memcached: How to Secure Port 11211 (Nessus 52633)
The unprotected memcached finding (Nessus plugin 52633) means a memcached cache on port 11211 answers anyone who can reach it, with no…
How to Fix Tomcat Manager Default Credentials (Nessus 34970)
Apache Tomcat Manager Common Administrative Credentials means a scanner logged in to Tomcat’s /manager application with a well-known username and password. Fix…
Oracle Default Accounts (Nessus 22075): Find and Lock Them with DBA_USERS_WITH_DEFPWD
Oracle Default Accounts (Nessus plugin 22075) means the scanner found accounts in your Oracle database that still use a well-known default password.…