Skip to main content
Advanced Search
Search Terms
Content Type

Exact Matches
Tag Searches
Date Options
Updated after
Updated before
Created after
Created before

Search Results

395 total results found

Remediation Steps

Information Disclosure - Debug Error Me... Drupal

Follow the steps below to remediate this finding on Drupal. Go to Administration > Configuration > Development > Logging and errors.Set "Error messages to display" to None.Save the configuration.

Linux (Debian/Ubuntu)

MTA Open Mail Relaying Allowed

Remediation Steps

MTA Open Mail Relaying Allowed Linux (Debian/Ubuntu)

Follow the steps below to remediate this finding on Linux (Debian/Ubuntu). For Postfix, restrict relay access in /etc/postfix/main.cf:smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destinationSet your trusted network:myn...

Linux (RHEL/CentOS/AlmaLinux)

MTA Open Mail Relaying Allowed

Remediation Steps

MTA Open Mail Relaying Allowed Linux (RHEL/CentOS/AlmaLinux)

Follow the steps below to remediate this finding on Linux (RHEL/CentOS/AlmaLinux). For Postfix on RHEL/CentOS, edit /etc/postfix/main.cf:smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destinationRestart Postfix:sudo syst...

Windows

MTA Open Mail Relaying Allowed

Remediation Steps

MTA Open Mail Relaying Allowed Windows

Follow the steps below to remediate this finding on Windows. For Microsoft Exchange, open the Exchange Admin Center.Go to Mail flow > Receive connectors.Select each connector and verify the Permission groups do not include Anonymous users for relay.For IIS SMT...

Generic / Developer guidance

NAT-PMP Detection (remote network)

Remediation Steps

NAT-PMP Detection (remote network) Generic / Developer guidance

Follow the steps below to remediate this finding on Generic / Developer guidance. NAT-PMP (Port Mapping Protocol) allows devices on the local network to automatically configure port forwarding on NAT gateways. If detectable from a remote network, the gateway i...

Linux (Debian/Ubuntu)

OpenSSH < 9.3 Multiple Vulnerabilities

Remediation Steps

OpenSSH < 9.3 Multiple Vulnerabilities Linux (Debian/Ubuntu)

Follow the steps below to remediate this finding on Linux (Debian/Ubuntu). Update OpenSSH to the latest available version:sudo apt update sudo apt upgrade openssh-serverVerify the installed version:ssh -VIf the distribution repositories do not provide a patche...

Linux (RHEL/CentOS/AlmaLinux)

OpenSSH < 9.3 Multiple Vulnerabilities

Remediation Steps

OpenSSH < 9.3 Multiple Vulnerabilities Linux (RHEL/CentOS/AlmaLinux)

Follow the steps below to remediate this finding on Linux (RHEL/CentOS/AlmaLinux). Update OpenSSH via the package manager:sudo yum update openssh-server # RHEL/CentOS 7 sudo dnf update openssh-server # RHEL/CentOS 8+ / AlmaLinuxVerify the installed ver...

Windows

OpenSSH < 9.3 Multiple Vulnerabilities

Remediation Steps

OpenSSH < 9.3 Multiple Vulnerabilities Windows

Follow the steps below to remediate this finding on Windows. For Windows Server with OpenSSH (Win32-OpenSSH), update via the optional features:Settings > Apps > Optional features > OpenSSH Server > ModifyOr use PowerShell to install the latest version from Git...

Linux (Debian/Ubuntu)

OpenSSH < 9.6 Multiple Vulnerabilities

Remediation Steps

OpenSSH < 9.6 Multiple Vulnerabilities Linux (Debian/Ubuntu)

Follow the steps below to remediate this finding on Linux (Debian/Ubuntu). Update OpenSSH to the latest available version:sudo apt update sudo apt upgrade openssh-serverVerify the installed version:ssh -VIf the distribution does not yet provide 9.6+, use backp...

Linux (RHEL/CentOS/AlmaLinux)

OpenSSH < 9.6 Multiple Vulnerabilities