GigaVUE-VM Rules and Notes

The GVM solution has the following potential vulnerabilities:

  • EOL/Obsolete Software: Apache HTTP Server 2.2.x Detected
  • Apache httpd Server ap_get_basic_auth_pw() Authentication Bypass Vulnerability
  • File Permissions (passwd, shadow and group) Are Not Properly Set
  • OpenSSH AES-GCM Cipher Remote Code Execution Vulnerability.
  • Linux Kernel Double Fetch Denial of Service Vulnerability