Kategori: Remediation Guides
Docker Remote API 2375 Exposed: How to Fix Nessus 124029
Docker Remote API Detection (Nessus plugin 124029) means dockerd answers Engine API requests over TCP without authentication, typically as the plaintext Docker…
AdminSDHolder Permissions: How to Remove Suspicious Access Rights and Force SDProp
An AdminSDHolder permissions finding means a non-privileged user, group or service account holds an access control entry (ACE) on CN=AdminSDHolder,CN=System, the template…
How to Fix ActiveMQ Default Credentials on the Web Console (Nessus 81375)
Apache ActiveMQ Web Console Default Credentials means a scanner logged in to the broker’s Jetty-hosted console (TCP 8161, /admin) with a shipped…
How to Reset the krbtgt Password Safely (Nessus 150484, PingCastle A-Krbtgt)
The Nessus finding “AD Starter Scan – Kerberos Krbtgt” (plugin 150484) and PingCastle rule A-Krbtgt mean the krbtgt account, whose key signs…
How to Rotate AWS Access Keys and Fix Security Hub IAM.3
[IAM.3] is an AWS Security Hub CSPM control that fails when an IAM user holds an active access key older than 90…
Ensure ptrace_scope Is Restricted: How to Set kernel.yama.ptrace_scope on Linux
“Ensure ptrace_scope is restricted” is a CIS benchmark check that fails when the Yama kernel setting kernel.yama.ptrace_scope is 0. At 0, any…
NTP Mode 6 Scanner and ntpd monlist: How to Restrict NTP Queries on Linux
The NTP Mode 6 Scanner finding (often paired with “ntpd monlist Command Enabled DoS”) means your ntpd answers control queries from any…
How to Fix “Ensure Core Dumps Are Restricted” on Linux (CIS)
“Ensure core dumps are restricted” is a CIS benchmark check that fails when a Linux host still lets processes, including setuid programs,…
OPEN_SSH_PORT: How to Restrict an Open SSH Port in GCP Firewall Rules
OPEN_SSH_PORT is a Google Cloud Security Command Center finding that means a VPC firewall rule allows SSH (TCP or SCTP port 22)…
EC2.13: How to Fix Security Groups Open to Port 22 (and EC2.19 High-Risk Ports)
EC2.13 is an AWS Security Hub CSPM control that fails when a security group allows inbound traffic to port 22 (SSH) from…