Kategori: Remediation Guides
How to Fix DNS Server Zone Transfer Information Disclosure (AXFR)
DNS Server Zone Transfer Information Disclosure (AXFR) means your name server hands a full copy of a zone to any host that…
How to Fix DNS Server Dynamic Update Record Injection: Set DNS Dynamic Updates to Secure Only
DNS Server Dynamic Update Record Injection means a DNS zone accepts RFC 2136 updates without authentication, so any host that can reach…
PUBLIC_SQL_INSTANCE: How to Restrict Cloud SQL Public IP Access (0.0.0.0/0 Authorized Networks)
PUBLIC_SQL_INSTANCE is a Google Cloud Security Command Center finding that means a Cloud SQL instance lists 0.0.0.0/0 as an authorized network, so…
Management Ports Should Be Closed on Your Virtual Machines: Azure Fix Guide
“Management ports should be closed on your virtual machines” is a Microsoft Defender for Cloud recommendation raised when a network security group…
Apache server-status Information Disclosure: How to Restrict or Disable mod_status
Apache mod_status /server-status Information Disclosure means anyone who can reach your web server can open the /server-status page and see live requests,…
Kubernetes API Server Should Be Configured With Restricted Access: AKS Fix Guide
“Kubernetes API server should be configured with restricted access” is a Microsoft Defender for Cloud recommendation raised when an AKS cluster’s public…
How to Replace an SSL Self-Signed Certificate (Nessus 57582, RDP 3389)
An SSL self-signed certificate finding means a TLS service (a website, an admin console, or RDP on port 3389) presents a certificate…
Ensure No World Writable Files Exist: How to Find and Fix World-Writable Files on Linux
“Ensure no world writable files exist” is a CIS benchmark check that fails when any regular file on a local Linux file…
Web Server Unconfigured – Default Install Page Present: How to Fix (Nessus 11422)
Web Server Unconfigured – Default Install Page Present is a Nessus finding (plugin 11422) raised when a web service answers with the…
MSXML 4.0 Unsupported: How to Remove the MSXML 4 Parser and Clear Nessus 62758
Microsoft XML Parser (MSXML) and XML Core Services Unsupported is the Nessus finding (plugin 62758) raised when a Windows host carries a…