Novell GroupWise WebAccess Accessible

medium Nessus Plugin ID 50693

Synopsis

The remote web server is accessible without authentication.

Description

The remote web server is a Novell GroupWise WebAccess console.

By allowing unauthenticated access to this web server, anyone may be able read status, configuration or log files pertaining to GroupWise WebAccess.

Solution

Consult the GroupWise Administration Guide for information about restricting access to GroupWise WebAccess.

See Also

http://www.nessus.org/u?3086959d

Plugin Details

Severity: Medium

ID: 50693

File Name: groupwise_webaccess_accessible.nasl

Version: 1.7

Type: remote

Family: Web Servers

Published: 11/23/2010

Updated: 6/4/2019

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Information

CPE: cpe:/a:novell:groupwise_webaccess

Excluded KB Items: Settings/disable_cgi_scanning