Quick Summary NFS Share Exported Without Authentication is a network service misconfiguration where a Network File System (NFS) share is exported without proper authentication or access restrictions. This may allow unauthorized users to mount the share, access sensitive files, modify…
Quick Summary LDAP Anonymous Bind Allowed is a directory service misconfiguration where the LDAP server permits unauthenticated users to bind and query directory information without valid credentials. This may allow attackers to enumerate users, groups, email addresses, and other sensitive…
Quick Summary SSH Root Login Permitted is a security misconfiguration where the SSH service allows direct login as the root user. Permitting root-level remote authentication significantly increases the risk of complete system compromise if credentials are exposed or brute-forced. Vulnerability…
Quick Summary SSH Password Authentication Enabled Instead of Key-Based is a security misconfiguration where the SSH service allows password-based authentication rather than enforcing public key authentication. Password-based SSH access significantly increases exposure to brute-force attacks, credential stuffing, and unauthorized remote…
Quick Summary RDP Without Network Level Authentication (NLA) is a security misconfiguration where the Remote Desktop Protocol (RDP) service allows connection attempts without requiring pre-authentication at the transport layer. When NLA is disabled, the server allocates system resources before user…
