Security @ WebAccess
Our county ran security audits and came back with a report. Our WebAccess
is at their firewall and they gave me these issues:
1. The remote web server seems to transmit credentials in clear text.
page:/manager/html:/realm="Tomcat Manager Application"
2. The remote web server might transmit credentials in clear text.
Page:"/gw/webacc"
3. The remote webserver contains a JSP application that is affected by a
cross site scripting vulnerability. The remote web server includes an
example JSP application, cal2.jsp that fails to sanitize user-supplied input
before using it to generate dynamic content.
4. the web application running on the remote host has across-site scripting
vulnerability. Description: The remot host is running Novell GroupWise
WebAccess and is vulnerable to a cross-site scripting issue in the User.lang
field of the login page.
Our GroupWise System is version 7.0.2 and is ssl End to End. except maybe
this web server? Any suggestions on how to fix would be greatly
appreciated.
--
TheSwtLdy
|
Threaded Mode
