Encryption Private Key Detection (PGP)

low Nessus Network Monitor Plugin ID 3784

Synopsis

The remote host passes information across the network in an insecure manner.

Description

The remote host has just passed a PGP encryption private key via plaintext on the network. This is a risk in that private keys should only reside on a local system and if they must be passed, they should be encrypted in transit.

Solution

Ensure that there are policies and guidelines in place that prohibit the passing of private encryption data in plaintext.

Plugin Details

Severity: Low

ID: 3784

Family: Data Leakage

Published: 10/16/2006

Updated: 1/15/2016