Ativos Detalhes do Ativo

Severidade	Remediação	Escopos	Ocorrências Relacionadas	Status	Atualizado
Alta	tcp/443: Modify the affected CGI scripts so that they properly escape arguments.	Network Infrastructure, System infrastructure, Domain	6748	Nova	17/01/2021-02:34:37
Alta	tcp/443: Upgrade to Apache version 2.4.46 or later.	Network Infrastructure, System infrastructure, Domain	6758	Nova	17/01/2021-02:34:39
Alta	tcp/443: Upgrade to Apache version 2.4.39 or later.	Network Infrastructure, System infrastructure, Domain	6764	Nova	17/01/2021-02:34:42
Alta	tcp/443: Set script integrity checking on target script or remove target script.	Network Infrastructure, System infrastructure, Domain	6770	Nova	17/01/2021-02:34:45
Alta	tcp/443: Upgrade to Apache version 2.2.33-dev / 2.4.26 or later.	Network Infrastructure, System infrastructure, Domain	6784	Nova	17/01/2021-02:34:52
Média	tcp/443: n/a	Network Infrastructure, System infrastructure, Domain	6738	Nova	17/01/2021-02:34:36
Média	tcp/443: Modify the affected CGI scripts so that they properly escape arguments, especially XML tags and special characters (angle brackets and slashes).	Network Infrastructure, System infrastructure, Domain	6746	Nova	17/01/2021-02:34:37
Média	tcp/443: Ensure the files do not contain any sensitive information, such as credentials to connect to a database, and delete or protect those files that should not be accessible.	Network Infrastructure, System infrastructure, Domain	6756	Nova	17/01/2021-02:34:38
Média	tcp/2096: Reconfigure the affected application, if possible, to avoid use of all 64-bit block ciphers. Alternatively, place limitations on the number of requests that are allowed to be processed over the same TLS connection to mitigate this vulnerability.	Network Infrastructure, System infrastructure, Domain	6920	Nova	17/01/2021-02:35:23
Média	tcp/2087: Reconfigure the affected application, if possible, to avoid use of all 64-bit block ciphers. Alternatively, place limitations on the number of requests that are allowed to be processed over the same TLS connection to mitigate this vulnerability.	Network Infrastructure, System infrastructure, Domain	6922	Nova	17/01/2021-02:35:23
Média	tcp/8443: Reconfigure the affected application, if possible, to avoid use of all 64-bit block ciphers. Alternatively, place limitations on the number of requests that are allowed to be processed over the same TLS connection to mitigate this vulnerability.	Network Infrastructure, System infrastructure, Domain	6924	Nova	17/01/2021-02:35:24
Média	tcp/443: Reconfigure the affected application, if possible, to avoid use of all 64-bit block ciphers. Alternatively, place limitations on the number of requests that are allowed to be processed over the same TLS connection to mitigate this vulnerability.	Network Infrastructure, System infrastructure, Domain	6926	Nova	17/01/2021-02:35:24
Média	tcp/2083: Reconfigure the affected application, if possible, to avoid use of all 64-bit block ciphers. Alternatively, place limitations on the number of requests that are allowed to be processed over the same TLS connection to mitigate this vulnerability.	Network Infrastructure, System infrastructure, Domain	6928	Nova	17/01/2021-02:35:24
Média	tcp/2053: Reconfigure the affected application, if possible, to avoid use of all 64-bit block ciphers. Alternatively, place limitations on the number of requests that are allowed to be processed over the same TLS connection to mitigate this vulnerability.	Network Infrastructure, System infrastructure, Domain	6930	Nova	17/01/2021-02:35:24
Média	tcp/2096: Reconfigure the affected application if possible to avoid use of medium strength ciphers.	Network Infrastructure, System infrastructure, Domain	6646	Nova	17/01/2021-02:35:29
Média	tcp/2087: Reconfigure the affected application if possible to avoid use of medium strength ciphers.	Network Infrastructure, System infrastructure, Domain	6638	Nova	17/01/2021-02:35:29
Média	tcp/8443: Reconfigure the affected application if possible to avoid use of medium strength ciphers.	Network Infrastructure, System infrastructure, Domain	6640	Nova	17/01/2021-02:35:29
Média	tcp/443: Reconfigure the affected application if possible to avoid use of medium strength ciphers.	Network Infrastructure, System infrastructure, Domain	6642	Nova	17/01/2021-02:35:29
Média	tcp/2083: Reconfigure the affected application if possible to avoid use of medium strength ciphers.	Network Infrastructure, System infrastructure, Domain	6644	Nova	17/01/2021-02:35:29
Média	tcp/2053: Reconfigure the affected application if possible to avoid use of medium strength ciphers.	Network Infrastructure, System infrastructure, Domain	6636	Nova	17/01/2021-02:35:30
Média	tcp/2096: Enable support for TLS 1.2 and 1.3, and disable support for TLS 1.0.	Network Infrastructure, System infrastructure, Domain	6522	Nova	17/01/2021-02:35:17
Média	tcp/2087: Enable support for TLS 1.2 and 1.3, and disable support for TLS 1.0.	Network Infrastructure, System infrastructure, Domain	6514	Nova	17/01/2021-02:35:18
Média	tcp/8443: Enable support for TLS 1.2 and 1.3, and disable support for TLS 1.0.	Network Infrastructure, System infrastructure, Domain	6516	Nova	17/01/2021-02:35:18
Média	tcp/443: Enable support for TLS 1.2 and 1.3, and disable support for TLS 1.0.	Network Infrastructure, System infrastructure, Domain	6518	Nova	17/01/2021-02:35:18
Média	tcp/2083: Enable support for TLS 1.2 and 1.3, and disable support for TLS 1.0.	Network Infrastructure, System infrastructure, Domain	6520	Nova	17/01/2021-02:35:18
Média	tcp/2053: Enable support for TLS 1.2 and 1.3, and disable support for TLS 1.0.	Network Infrastructure, System infrastructure, Domain	6512	Nova	17/01/2021-02:35:18
Média	tcp/443: Upgrade to Apache version 2.4.42 or later.	Network Infrastructure, System infrastructure, Domain	6760	Nova	17/01/2021-02:34:40
Média	tcp/443: Upgrade to Apache version 2.4.41 or later.	Network Infrastructure, System infrastructure, Domain	6762	Nova	17/01/2021-02:34:41
Média	tcp/443: Upgrade to Apache version 2.4.33 or later.	Network Infrastructure, System infrastructure, Domain	6766	Nova	17/01/2021-02:34:43
Média	tcp/443: Upgrade to Apache version 2.4.38 or later.	Network Infrastructure, System infrastructure, Domain	6768	Nova	17/01/2021-02:34:45
Média	tcp/443: Upgrade to Apache version 2.4.35 or later.	Network Infrastructure, System infrastructure, Domain	6772	Nova	17/01/2021-02:34:46
Média	tcp/443: Upgrade to Apache version 2.4.34 or later.	Network Infrastructure, System infrastructure, Domain	6774	Nova	17/01/2021-02:34:47
Média	tcp/443: Change the Apache ServerTokens configuration value to 'Prod'	Network Infrastructure, System infrastructure, Domain	6778	Nova	17/01/2021-02:34:48
Média	tcp/443: Upgrade to Apache version 2.4.28 or later.	Network Infrastructure, System infrastructure, Domain	6780	Nova	17/01/2021-02:34:49
Média	tcp/443: Upgrade to Apache version 2.4.27 or later.	Network Infrastructure, System infrastructure, Domain	6782	Nova	17/01/2021-02:34:50
Média	tcp/443: Modify the HTTP headers of the web server to not disclose detailed information about the underlying web server.	Network Infrastructure, System infrastructure, Domain	6818	Nova	17/01/2021-02:35:00
Média	tcp/443: Return the X-Frame-Options or Content-Security-Policy (with the 'frame-ancestors' directive) HTTP header with the page's response. This prevents the page's content from being rendered by another site when using the frame or iframe HTML tags.	Network Infrastructure, System infrastructure, Domain	6852	Nova	17/01/2021-02:35:05

Definições de Scan: Adicionar nova

ID do Scan	Scans	Tipo	Sensor	Status	Atualizado	Editar	Executar	Excluir

---

Scans executados

Sensor / Scan ID	Status	Progresso	Iniciado	Finalizado	Detalhes	Excluir
NESSUS / 355		0 26 88 0 223	17/01/2021-01:18:58	17/01/2021-02:35:34
NESSUS / 353		0 0 12 0 126	17/01/2021-00:46:28	17/01/2021-01:13:02
NESSUS / 352		0 0 24 0 252	16/01/2021-23:11:33	16/01/2021-23:38:18

Links de Investigação Online

Alienvault OTX	Informações complementares
Censys (IP)	Informações complementares
ThreatCrowd	Informações complementares
Threat Miner	Informações complementares

 Grupo de Ativos Relacionados

Nenhum Grupo de Ativos.

---

 Referências Externas

CERT: 836068
IAVA: 2020-A-0129-S, 2020-A-0376
IAVT: 0001-T-0530, 0001-T-0747, 0001-T-0931
BID: 100872, 106158, 33065, 92631, 99170, 99569
CVE: CVE-2004-2761, CVE-2016-2183, CVE-2016-6329, CVE-2017-7679, CVE-2017-9789, CVE-2017-9798, CVE-2018-11763, CVE-2018-1312, CVE-2018-8011, CVE-2019-0190, CVE-2019-0220, CVE-2019-10098, CVE-2020-11993, CVE-2020-1934
CWE: 310, 693, 86, 929, 930, 990
CPE: cpe:/a:apache:http_server, cpe:/a:apache:http_server cpe:/a:apache:httpd, cpe:/a:apache:httpd cpe:/a:apache:http_server, cpe:/a:ietf:md5 cpe:/a:ietf:x.509_certificate, cpe:/a:wordpress:wordpress
OWASP: OWASP-CM-006, OWASP-DV-008

Adicionar Novo -->

 Alertas

Nenhum Alerta definido.