Advanced Search
Search Results
176 total results found
Remediation Steps
Follow the steps below to remediate this finding on Generic / Developer guidance. NAT-PMP (Port Mapping Protocol) allows devices on the local network to automatically configure port forwarding on NAT gateways. If detectable from a remote network, the gateway i...
Remediation Steps
Follow the steps below to remediate this finding on Linux (Debian/Ubuntu). Update OpenSSH to the latest available version:sudo apt update sudo apt upgrade openssh-serverVerify the installed version:ssh -VIf the distribution repositories do not provide a patche...
Remediation Steps
Follow the steps below to remediate this finding on Linux (RHEL/CentOS/AlmaLinux). Update OpenSSH via the package manager:sudo yum update openssh-server # RHEL/CentOS 7 sudo dnf update openssh-server # RHEL/CentOS 8+ / AlmaLinuxVerify the installed ver...
Remediation Steps
Follow the steps below to remediate this finding on Windows. For Windows Server with OpenSSH (Win32-OpenSSH), update via the optional features:Settings > Apps > Optional features > OpenSSH Server > ModifyOr use PowerShell to install the latest version from Git...
Remediation Steps
Follow the steps below to remediate this finding on Linux (Debian/Ubuntu). Update OpenSSH to the latest available version:sudo apt update sudo apt upgrade openssh-serverVerify the installed version:ssh -VIf the distribution does not yet provide 9.6+, use backp...
Remediation Steps
Follow the steps below to remediate this finding on Linux (RHEL/CentOS/AlmaLinux). Update OpenSSH via the package manager:sudo yum update openssh-server # RHEL/CentOS 7 sudo dnf update openssh-server # RHEL/CentOS 8+ / AlmaLinuxVerify the installed ver...
Remediation Steps
Follow the steps below to remediate this finding on Windows. Update Win32-OpenSSH to a version >= 9.6 via optional features or by downloading the latest release from the official Win32-OpenSSH GitHub releases page and running the MSI installer.Restart the sshd...
Remediation Steps
Follow the steps below to remediate this finding on Linux (Debian/Ubuntu). Update OpenSSL to the latest patched version:sudo apt update sudo apt upgrade openssl libssl3Verify the installed version:openssl versionRestart services that depend on OpenSSL (e.g., A...
Remediation Steps
Follow the steps below to remediate this finding on Linux (RHEL/CentOS/AlmaLinux). Update OpenSSL via the package manager:sudo yum update openssl # RHEL/CentOS 7 sudo dnf update openssl # RHEL/CentOS 8+ / AlmaLinuxVerify the installed version:openssl v...
Remediation Steps
Follow the steps below to remediate this finding on Windows. On Windows, OpenSSL is typically bundled with other software (Apache, Nginx, Git, etc.).Update each bundled application to a version that includes OpenSSL 3.0.12 or later.For standalone OpenSSL insta...
Remediation Steps
Follow the steps below to remediate this finding on Linux (Debian/Ubuntu). Update OpenSSL to the latest patched version:sudo apt update sudo apt upgrade openssl libssl3Verify the installed version:openssl versionRestart services that depend on OpenSSL:sudo sys...
Remediation Steps
Follow the steps below to remediate this finding on Linux (RHEL/CentOS/AlmaLinux). Update OpenSSL via the package manager:sudo yum update openssl # RHEL/CentOS 7 sudo dnf update openssl # RHEL/CentOS 8+ / AlmaLinuxVerify the installed version:openssl v...
Remediation Steps
Follow the steps below to remediate this finding on Windows. Update each application that bundles OpenSSL to a version that includes OpenSSL 3.0.13 or later.For standalone OpenSSL installations, download the latest Win64 installer from the official OpenSSL bin...
Remediation Steps
Follow the steps below to remediate this finding on Generic / Developer guidance. Path traversal (directory traversal) allows attackers to access files outside the intended directory by injecting sequences such as ../.Remediation:Validate file paths against an...
Remediation Steps
Follow the steps below to remediate this finding on WordPress. Avoid building file paths from user input in custom themes and plugins.Use WordPress file API functions (get_template_directory(), WP_Filesystem) rather than raw PHP filesystem functions.Sanitise a...
Remediation Steps
Follow the steps below to remediate this finding on Joomla. Use JPath::clean() to normalise paths and JPath::check() to validate that the resolved path is within the allowed base directory:JPath::check($filePath);Never pass raw user input to JFile::read() or P...
Remediation Steps
Follow the steps below to remediate this finding on Drupal. Use Drupal's file system service to resolve paths safely:$file_system = \Drupal::service('file_system'); $realpath = $file_system->realpath($uri);Never build file paths from unvalidated user input.Use...
Remediation Steps
Follow the steps below to remediate this finding on Microsoft IIS webserver. In IIS Manager, select your site and open HTTP Response Headers.If X-Powered-By is listed, select it and click Remove in the Actions pane.For ASP.NET, also remove the X-AspNet-Version...