NTLM Authorization Required
Severity: Information
Summary #
Invicti detected NTLM authentication is required for a resource.
Generally, using NTLM authentication is not a good solution.
Impact #
There are some potential issues:
- It may cause some information leakage.
- It may be possible to brute-force or/and lock accounts. Can rarely cause DoS.
- If this is an admin screen, it should not be publicly accessible.
- If this is an unrequired login screen, it should be removed.
Remediation #
- See Impact.
- Disable NTLM authorization or apply firewall rules.
Classifications #
ISO27001-A.9.4.1; OWASP PC-C6
, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
Related Vulnerabilities
