Novell GroupWise Internet Agent Accessible

medium Nessus Plugin ID 50691

Synopsis

The remote web server is accessible without authentication.

Description

The remote web server is a Novell GroupWise Internet Agent web console.

By allowing unauthenticated access to this web server, anyone may be able to read status, configuration, or log files pertaining to GroupWise Internet Agent, or even restart the agent.

Solution

Consult the GroupWise Administration Guide for information about restricting access to the GroupWise Internet Agent.

See Also

http://www.nessus.org/u?019e5e6e

Plugin Details

Severity: Medium

ID: 50691

File Name: groupwise_ia_accessible.nasl

Version: Revision: 1.4

Type: remote

Family: Web Servers

Published: 11/23/2010

Updated: 10/21/2015

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P

Vulnerability Information

Required KB Items: www/groupwise-ia