Kategori: Remediation Guides
CVE-2024-31497 PuTTY: How to Fix the P-521 Key Recovery Finding (Nessus 193433)
CVE-2024-31497 is a flaw in PuTTY and Pageant 0.68 to 0.80: biased ECDSA nonces let an attacker recover a NIST P-521 private…
PrintNightmare Registry Fix: Remediating Nessus 151488 (Point and Print Exposure)
The Nessus finding “Windows PrintNightmare Registry Exposure” means a Windows host has Point and Print policy values that let users install printer…
How to Fix CVE-2019-11510 in Pulse Connect Secure (SA44101)
CVE-2019-11510 is a critical pre-authentication arbitrary file read in Pulse Connect Secure (now Ivanti Connect Secure) VPN gateways, which Nessus reports as…
PostgreSQL Default Unpassworded Account: How to Fix Trust Authentication (Nessus 10483)
PostgreSQL Default Unpassworded Account (Nessus plugin 10483) means the scanner logged in to your PostgreSQL server over the network without supplying a…
PetitPotam Mitigation: How to Fix Nessus 152102 and Block NTLM Relay to AD CS
PetitPotam (CVE-2021-36942) forces a Windows server, usually a domain controller, to authenticate over EFSRPC to an attacker’s machine, which then relays that…
How to Fix CVE-2024-3400 in PAN-OS GlobalProtect (Nessus 193255)
CVE-2024-3400 is a critical command injection flaw in the GlobalProtect feature of Palo Alto Networks PAN-OS 10.2, 11.0 and 11.1 that lets…
How to Fix Oracle TNS Listener Remote Poisoning (CVE-2012-1675)
Oracle TNS Listener Remote Poisoning (CVE-2012-1675) means your database listener accepts service registrations from remote hosts, so an attacker can register a…
How to Fix CVE-2024-6387 (regreSSHion) in OpenSSH < 9.8
CVE-2024-6387, known as regreSSHion, is a race condition in the OpenSSH server (sshd) that can let an unauthenticated attacker run code as…
How to Fix an Open Redirect Vulnerability (CGI Generic Open Redirection, Nessus 47834)
An open redirect vulnerability (Nessus calls it CGI Generic Open Redirection) means a page reads a destination from a parameter such as…
MySQL Unpassworded Account Check (Nessus 10481): How to Find and Fix Passwordless MySQL and MariaDB Accounts
MySQL Unpassworded Account Check (Nessus plugin 10481) means the scanner logged in to your MySQL or MariaDB server over the network with…