Novell GroupWise Document Viewer Agent Web Console Accessible

medium Nessus Plugin ID 50689

Synopsis

The remote web server console is accessible without authentication.

Description

The remote web server is a Novell GroupWise Document Viewer Agent (DVA) Web Console. By allowing unauthenticated access to this agent, anyone may be able read status, configuration or log files pertaining to the DVA.

Solution

Consult the GroupWise Administration Guide for information about restricting access to GroupWise Document Viewer Agent.

See Also

http://www.nessus.org/u?3086959d

Plugin Details

Severity: Medium

ID: 50689

File Name: groupwise_dva_accessible.nasl

Version: Revision: 1.4

Type: remote

Family: Web Servers

Published: 11/23/2010

Updated: 10/21/2015

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N