Active Directory Certificate Services Web Enrollment Anonymous Access

Medium Nessus Plugin ID 55133


The remote web server is a certificate enrollment server that anyone can access without credentials.


The remote web server is running the Microsoft Certificate Services.

However, the service is misconfigured in such a way that anonymous users can log into the service to request certificates, thus breaking the chain of trust.


Edit the remote web server configuration to force authentication prior to accessing the remote resource.

Plugin Details

Severity: Medium

ID: 55133

File Name: microsoft_certsrv_anon_detect.nasl

Version: 1.4

Type: remote

Family: CGI abuses

Published: 2011/06/15

Updated: 2019/11/22

Dependencies: 10107

Risk Information

Risk Factor: Medium

CVSS v2.0

Base Score: 5

Temporal Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Temporal Vector: CVSS2#E:H/RL:U/RC:ND

Vulnerability Information

Excluded KB Items: Settings/disable_cgi_scanning