Kategori: Remediation Guides
Backup Files Disclosure: How to Remove Backup Files From the Web Root
“Backup Files Disclosure” means a scanner retrieved a leftover copy of a web file (such as index.php.bak, config.php~ or site.zip) that the…
IAM.4 Root User Access Key: How to Find, Replace and Delete It
[IAM.4] IAM root user access key should not exist is a Critical AWS Security Hub CSPM control that fails while the account…
Pre-Windows 2000 Compatible Access: Removing Authenticated Users Safely
Pre-Windows 2000 Compatible Access is a built-in Active Directory group that grants its members read access to every user and group in…
How to Remove Apache Tomcat Default Files (Nessus 12085)
Apache Tomcat Default Files (Nessus plugin 12085) means a Tomcat server still serves its stock welcome page, documentation, example JSPs and servlets,…
How to Fix Zerologon (CVE-2020-1472) on Domain Controllers
Zerologon (CVE-2020-1472) is a critical Netlogon flaw that lets an unauthenticated attacker on the network impersonate any computer to a domain controller…
How to Fix the Windows Speculative Execution Configuration Check (Nessus 132101, Qualys QID 91462)
The Windows Speculative Execution Configuration Check (Nessus plugin 132101) flags hosts where Spectre, Meltdown and related CPU side-channel mitigations are not active.…
How to Fix CVE-2020-14882 (Oracle WebLogic Console RCE)
CVE-2020-14882 is a critical flaw in the Administration Console of Oracle WebLogic Server that lets an unauthenticated attacker run commands on the…
Web Server Transmits Cleartext Credentials: How to Fix It
“Web Server Transmits Cleartext Credentials” means a scanner found a login form (an input of type password), or an HTTP Basic Authentication…
How to Fix CVE-2025-24813: Apache Tomcat Partial PUT Path Equivalence RCE
CVE-2025-24813 is a path equivalence flaw in Apache Tomcat’s partial PUT handling that can lead to file disclosure, file tampering or remote…
How to Fix SSL/TLS Diffie-Hellman Modulus <= 1024 Bits (Logjam)
SSL/TLS Diffie-Hellman Modulus <= 1024 Bits (Logjam) means a TLS service offers ephemeral Diffie-Hellman (DHE) key exchange with a prime of 1024…