Gallery Configuration Mode Authentication Bypass (deprecated)
High Nessus Network Monitor Plugin ID 2500
SynopsisThe remote host is vulnerable to a flaw that allows for the bypassing of authentication.
DescriptionThe remote server is running Gallery in configuration mode. Gallery is a software tool for webservers that allows for easy creation of online photo albums. This version of Gallery has been installed but not yet configured. Any remote user discovering the configuration screen may be able to modify web content on the remote server.
SolutionConfigure Gallery, then disable configuration mode.