# findings

vuln_id: V-218795
rule_id: SV-218795r960963_rule
status: NotAFinding
comments: There are no sample files in the targeted directories. This is Not a Finding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: A61E6E1F4236FBB1D74C63FF96102D9E19672555
  ~~~~~
  There are no files or folders with names containing 'sample' in the targeted directories.


  To determine the correct status, a manual review is still required to identify if any example code, example applications or tutorials exist and are not explicitly used by the production website per the check text.


vuln_id: V-218796
rule_id: SV-218796r960963_rule
status: NotAFinding
comments: There are no accounts created by uninstalled features. This is Not a Finding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: 18A38144AE758B632F13BB4CD7F8C15B7EA37790
  ~~~~~
  Local user accounts on this system:

  DefaultAccount
  DOD_Admin
  Visitor
  WDAGUtilityAccount
  X_Admin


vuln_id: V-218797
rule_id: SV-218797r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: A651C464F3C53AD8D73A90109651B37A8084D1B7
  ~~~~~
  The following Windows features are installed:

  AzureArcSetup
  DeviceHealthAttestationService
  FileAndStorage-Services
  File-Services
  FS-FileServer
  NET-Framework-45-ASPNET
  NET-Framework-45-Core
  NET-Framework-45-Features
  NET-WCF-HTTP-Activation45
  NET-WCF-Services45
  NET-WCF-TCP-PortSharing45
  PowerShell
  PowerShellRoot
  Storage-Services
  System-DataArchiver
  WAS
  WAS-Config-APIs
  WAS-Process-Model
  Web-App-Dev
  Web-Asp-Net45
  Web-Common-Http
  Web-Default-Doc
  Web-Dir-Browsing
  Web-Filtering
  Web-Health
  Web-Http-Errors
  Web-Http-Logging
  Web-Http-Tracing
  Web-Includes
  Web-ISAPI-Ext
  Web-ISAPI-Filter
  Web-Mgmt-Console
  Web-Mgmt-Tools
  Web-Net-Ext45
  Web-Performance
  Web-Security
  Web-Server
  Web-Stat-Compression
  Web-Static-Content
  Web-WebServer
  Windows-Defender
  WoW64-Support

comments:
  Regularly reviewed the IIS 10.0 web server and removed any unnecessary operating system features, utility programs, plug-ins, and modules. This is Not a Finding


vuln_id: V-218798
rule_id: SV-218798r1112381_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be OPEN on 03/05/2026
  ResultHash: 47C2C311101A88836E6EF2E986BC87A38AC57B63
  ~~~~~
  The following invalid MIME types for OS shell program extensions are configured:

  .exe
  .dll
  .csh

comments:
  Manual check shows settings as follows:

  No invalid MIME types for OS shell program extensions found.


vuln_id: V-218799
rule_id: SV-218799r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 11E9E664D97AAF7C5FF4F4BDDCF9203D790D431E
  ~~~~~
  WebDAV is not installed.


vuln_id: V-218801
rule_id: SV-218801r961083_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 7C036395A18A2F6B324D665A6F665274B1C279AC
  ~~~~~
  No .java or .jpp files were found on the system.


vuln_id: V-218802
rule_id: SV-218802r1138072_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: 9A3718B89C7FADF6CB49CB06D125501748FAE274
  ~~~~~
  Below is a list of local groups and their members (if any):

  Group:	Access Control Assistance Operators

  Group:	Administrators
    X_Admin
    DOD_Admin
    Server Administrator Group

  Group:	Backup Operators
    Server Administrator Group

  Group:	Certificate Service DCOM Access

  Group:	Cryptographic Operators

  Group:	Distributed COM Users

  Group:	Event Log Readers

  Group:	Guests
    Visitor

  Group:	Hyper-V Administrators

  Group:	IIS_IUSRS

  Group:	Network Configuration Operators

  Group:	Performance Log Users

  Group:	Performance Monitor Users

  Group:	Power Users

  Group:	Print Operators

  Group:	RDS Endpoint Servers

  Group:	RDS Management Servers

  Group:	RDS Remote Access Servers

  Group:	Remote Desktop Users
    Server Administrator Group

  Group:	Remote Management Users

  Group:	Replicator

  Group:	Storage Replica Administrators

  Group:	System Managed Accounts Group
    DefaultAccount

  Group:	Users
    INTERACTIVE
    Authenticated Users
    Domain Users

comments:
  Restricted system resource access to authorized administrators, enforce least privilege, disable unnecessary user access, and conduct regular audits to ensure compliance. This is Not a Finding


vuln_id: V-218803
rule_id: SV-218803r1138074_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
comments:
  Ensured all IIS 10.0 scripts, applications, and configuration files have proper permissions to prevent unauthorized access, modification, or execution. This is Not a Finding


vuln_id: V-218804
rule_id: SV-218804r1043180_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 82F8F3236DC4CEA119EF339FF044AF71A3B6F80F
  ~~~~~
  Cookie Settings Mode is configured to 'UseCookies'


vuln_id: V-218805
rule_id: SV-218805r1067583_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 7533F9E6958FD6D045546A3732F63AFD8472E223
  ~~~~~
  Cookie Settings Mode is configured to 'UseCookies'
  Time-out is configured to '00:15:00'


vuln_id: V-218806
rule_id: SV-218806r961122_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
comments:
  Disabled directory browsing in IIS 10.0 to prevent unauthorized users from viewing file and folder listings, reducing exposure to sensitive information. This is Not a Finding


vuln_id: V-218807
rule_id: SV-218807r1067586_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 530DCB7F759E36FF01EB01CF5B0A9E37991A6046
  ~~~~~
  Validation method is configured to 'HMACSHA256'
  Encryption method is configured to 'Auto'


vuln_id: V-218808
rule_id: SV-218808r961158_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 5386A3B2F3411A770BCAD2C194ACBAEBD1970A52
  ~~~~~
  Directory Browsing is disabled.


vuln_id: V-218809
rule_id: SV-218809r961167_rule
status: Not_Applicable
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT APPLICABLE on 03/05/2026
  ResultHash: 4BD2B86D8CFC3DF2188407FE8BEF3C5953DFB07F
  ~~~~~
  The ContentIndex\Catalogs key does not exist so this check is Not Applicable.


vuln_id: V-218810
rule_id: SV-218810r1022657_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 8DD7CFE973D10647A1435F5B797FDBD4463D27D1
  ~~~~~
  Error Responses is configured to 'Detailed errors for local requests and custom error pages for remote requests'

  errorMode:	DetailedLocalOnly


vuln_id: V-218812
rule_id: SV-218812r961278_rule
status: Not_Applicable
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT APPLICABLE on 03/05/2026
  ResultHash: 69339D5EDE3A1D594FB554D39E84CA77B3304C98
  ~~~~~
  The remote management feature of IIS is not installed so this check is Not Applicable.


vuln_id: V-218813
rule_id: SV-218813r961281_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 32AFF8CF36570A0DC084CA270EE023B4DED1D486
  ~~~~~
  There is nothing preventing an administrator from shutting down either the webservice or an individual IIS site in the event of an attack. Documentation exists describing how.


vuln_id: V-218814
rule_id: SV-218814r1067589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 3D17137C642E0082CB98AAEDAD92AC406296074C
  ~~~~~
  Path:			C:\inetpub
  OverallState:	More restrictive than Expected
  Compliance:	Compliant
  Unexpected rules...
  ---------------------
  State:		MoreRestrictive
  Compliant:	True
  Identity:		APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES
  Type:		N/A
  Basic:		N/A
  Expected:		ReadAndExecute
  Advanced:	
  Expected:		ExecuteFile, ListDirectory, ReadAttributes, ReadData, ReadExtendedAttributes, ReadPermissions, Traverse
  Inherited:		N/A
  AppliesTo:	N/A
  Summary:		Missing Rule: An expected rule with rights 'ReadAndExecute' was not found on the system.

  State:		MoreRestrictive
  Compliant:	True
  Identity:		APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES
  Type:		N/A
  Basic:		N/A
  Expected:		ReadAndExecute
  Advanced:	
  Expected:		ExecuteFile, ListDirectory, ReadAttributes, ReadData, ReadExtendedAttributes, ReadPermissions, Traverse
  Inherited:		N/A
  AppliesTo:	N/A
  Summary:		Missing Rule: An expected rule with rights 'ReadAndExecute' was not found on the system.
  ---------------------


vuln_id: V-218815
rule_id: SV-218815r961392_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 6ADE9501D86E927416808AF0B186536D51A249DE
  ~~~~~
  Logs are set to roll over Daily.


vuln_id: V-218816
rule_id: SV-218816r1067591_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: C7672C2E607627099A46E345AF4C5CCB919F07F7
  ~~~~~
  Path:			C:\WINDOWS\system32\inetsrv\Inetmgr.exe
  OverallState:	More restrictive than Expected
  Compliance:	Compliant
  Unexpected rules...
  ---------------------
  State:		MoreRestrictive
  Compliant:	True
  Identity:		CREATOR OWNER
  Type:		N/A
  Basic:		N/A
  Expected:		FullControl
  Advanced:	
  Expected:		AppendData, ChangePermissions, CreateDirectories, CreateFiles, Delete, DeleteSubdirectoriesAndFiles, ExecuteFile, ListDirectory, ReadAttributes, ReadData, ReadExtendedAttributes, ReadPermissions, TakeOwnership, Traverse, WriteAttributes, WriteData, WriteExtendedAttributes
  Inherited:		N/A
  AppliesTo:	N/A
  Summary:		Missing Rule: An expected rule with rights 'FullControl' was not found on the system.
  ---------------------


vuln_id: V-218817
rule_id: SV-218817r961470_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: 909864146B7EF18AC7E6CCAEB573BFB88320271A
  ~~~~~
  Software installed on this system:

  ActivID ActivClient x64
  Axway Desktop Validator
  CRLAutoCache
  DoD Secure Host Baseline Server
  InstallRoot
  Microsoft Edge
  Microsoft NetBanner
  Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.38.33130
  Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.38.33130
  STIG Viewer 3 (Machine)
  Veritas Backup Exec Remote Agent for Windows
  WinZip 23.0

comments:
  Enabled and enforced TLS 1.2 or higher in IIS 10.0 to ensure secure encrypted communication and protect against vulnerabilities in outdated protocols. This is Not a Finding


vuln_id: V-218818
rule_id: SV-218818r961470_rule
status: Not_Applicable
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT APPLICABLE on 03/05/2026
  ResultHash: 1BA0DAED412A266D2A2A6B88E64E20ADB5E27D37
  ~~~~~
  'C:\WINDOWS\web\printers' does not exist.

  The Print Services role and the Internet Printing role are not installed so this check is Not Applicable.


vuln_id: V-218819
rule_id: SV-218819r1022659_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 8CBC995ED18829A1A7D2C11A22AFC94E2B587D36
  ~~~~~
  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\HTTP\Parameters
  Value Name:	URIEnableCache
  Value:		0
  Type:		REG_DWORD

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\HTTP\Parameters
  Value Name:	UriMaxUriBytes
  Value:		0
  Type:		REG_DWORD

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\HTTP\Parameters
  Value Name:	UriScavengerPeriod
  Value:		0
  Type:		REG_DWORD


vuln_id: V-218820
rule_id: SV-218820r961632_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: C25C8289B0EA2E5E62D0AB638195DFF95EA06806
  ~~~~~
  keepSessionIdSecure is set to True


vuln_id: V-218821
rule_id: SV-218821r1067596_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: B61C09790F563535A9E85CCAE0DFEC8635007810
  ~~~~~
  HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server
  ValueName 'DisabledByDefault' is '0' (REG_DWORD)
  ValueName 'Enabled' is '1' (REG_DWORD)

  HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server
  ValueName 'DisabledByDefault' is '1' (REG_DWORD)
  ValueName 'Enabled' is '0' (REG_DWORD)

  HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server
  ValueName 'DisabledByDefault' is '1' (REG_DWORD)
  ValueName 'Enabled' is '0' (REG_DWORD)

  HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server
  ValueName 'DisabledByDefault' is '1' (REG_DWORD)
  ValueName 'Enabled' is '0' (REG_DWORD)

  HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server
  ValueName 'DisabledByDefault' is '1' (REG_DWORD)
  ValueName 'Enabled' is '0' (REG_DWORD)


vuln_id: V-218822
rule_id: SV-218822r961632_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 4BDF84B533F31E10B68E8C1D4A5EA500F955AE4A
  ~~~~~
  HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server
  ValueName 'DisabledByDefault' is '0' (REG_DWORD)

  HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server
  ValueName 'DisabledByDefault' is '1' (REG_DWORD)
  ValueName 'Enabled' is '0' (REG_DWORD)

  HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server
  ValueName 'DisabledByDefault' is '1' (REG_DWORD)
  ValueName 'Enabled' is '0' (REG_DWORD)

  HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server
  ValueName 'DisabledByDefault' is '1' (REG_DWORD)
  ValueName 'Enabled' is '0' (REG_DWORD)

  HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server
  ValueName 'DisabledByDefault' is '1' (REG_DWORD)
  ValueName 'Enabled' is '0' (REG_DWORD)


vuln_id: V-218823
rule_id: SV-218823r961863_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: 5A9A993DF5E4702982BD11FC1A399EF47A354B5D
  ~~~~~
  Local user accounts on this system.  Confirm if any are used by IIS and if so, verify that default passwords have been changed:

  Name:		DOD_Admin
  Enabled:		True
  SID:			S-1-5-21-2359828523-3188837691-268305261-1000
  Password Age:	113 days

comments:
  Ensured IIS 10.0 web server logs all required HTTP request details to facilitate auditing, forensic analysis, and security monitoring. This is Not a Finding


vuln_id: V-218824
rule_id: SV-218824r961863_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 6CC480805F1D38F03EA4026B3D32A856071B7CC3
  ~~~~~
  Unspecified ISAPI is not enabled. NOT A FINDING.
  Unspecified CGI is not enabled. NOT A FINDING.


vuln_id: V-218825
rule_id: SV-218825r1067593_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: A801FC129AB7FA426BB47F800991FE54A5673509
  ~~~~~
  Compliant Rules:
  ----------------
  Mode:	allow
  Users:	All Users
  Roles:	
  Verbs:	

  Mode:	deny
  Users:	Anonymous Users
  Roles:	
  Verbs:


vuln_id: V-218826
rule_id: SV-218826r960735_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 5A7B32B2A3CB2520F7640F390CB84EC0B4D2A14A
  ~~~~~
  MaxConnections is set to 4294967295


vuln_id: V-218827
rule_id: SV-218827r1112380_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be OPEN on 03/05/2026
  ResultHash: F09EC8ADFB484180B5174DA75304B712E14EBA02
  ~~~~~
  HSTS is not enabled. FINDING.
  HSTS max-age is not configured. FINDING.
  HSTS includeSubDomains is enabled. NOT A FINDING.
  HSTS redirectHttpToHttps is enabled. NOT A FINDING.

comments:
  Manual check shows al setting are as follows:


  HSTS is enabled. NOT A FINDING.
  HSTS max-age is 5. NOT A FINDING.
  HSTS includeSubDomains is enabled. NOT A FINDING.
  HSTS redirectHttpToHttps is enabled. NOT A FINDING.

  This is Not a Finding


vuln_id: V-228572
rule_id: SV-228572r960963_rule
status: Not_Applicable
comments: The IIS web server is not running SMTP relay services, this is Not Applicable.
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: 3B7C7319D6AEB5A130CFDA357A0A502827AB79ED
  ~~~~~
  SMTP-Server Feature:	Available

  System is not listening on port 25.  Confirm there are no SMTP relays using a custom port.  If no SMTP relays exist, this may be marked as 'Not Applicable'.


vuln_id: V-241789
rule_id: SV-241789r1022662_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 66B7D124A0E1520B94BF24EE1F406C85600BB6A2
  ~~~~~
  'X-Powered-By' HTTP header has been removed.


vuln_id: V-268325
rule_id: SV-268325r1025163_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 9C13D4E19413A0316E06B6FA6D701ADB52DBB1C6
  ~~~~~
  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\HTTP\Parameters
  Value Name:	DisableRequestSmuggling
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-218736
rule_id: SV-218736r1022669_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: 453FAD461534700007B4F585B0D2FD1A4236A4FD
  ~~~~~
  Cookie Settings is set to 'UseCookies'


vuln_id: V-218737
rule_id: SV-218737r1022671_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  Site: Default Web Site
  ResultHash: 1F8B0BF251048DDF52481451B9AA669A5C254D2B
  ~~~~~
  Require SSL is NOT enabled

comments:
  Ensured only Secure Socket Layer (SSL) connections are accepted by enabling the "Require SSL" setting in IIS Manager. This is Not A Finding


vuln_id: V-218738
rule_id: SV-218738r1022673_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  Site: Default Web Site
  ResultHash: 1F8B0BF251048DDF52481451B9AA669A5C254D2B
  ~~~~~
  Require SSL is NOT enabled

comments:
  Ensured only Secure Socket Layer (SSL) connections are accepted by enabling the "Require SSL" setting in IIS Manager. This is Not A Finding


vuln_id: V-218739
rule_id: SV-218739r1022675_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 03/05/2026
  Site: Default Web Site
  ResultHash: 0B44ED3D6039C1A0BDB60FE41477857D9DAB447E
  ~~~~~
  'File' is the only option selected.

comments:
  Manual check shows setting as follows:

  Both ETW and Log file logging are enabled.

  This is Not a Finding


vuln_id: V-218741
rule_id: SV-218741r1022677_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 03/05/2026
  Site: Default Web Site
  ResultHash: 7599E6F84AF0FE02631E378C3BDEFF3AC6CE19D6
  ~~~~~
  Log format is 'W3C'

  The 'Request Header >> Connection' custom field is NOT configured.

  The 'Request Header >> Warning' custom field is NOT configured.

comments:
  Manual check shows setting as follows:

  Log format is 'W3C'

  The 'Request Header >> Connection' custom field is configured.

  The 'Request Header >> Warning' custom field is configured.


vuln_id: V-218742
rule_id: SV-218742r1022679_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 03/05/2026
  Site: Default Web Site
  ResultHash: C3C26BB04CA1EEAB0A14FFB0A603274C530242F3
  ~~~~~
  Log format is 'W3C'

  User Agent, User Name, and Referrer are all logged.

  The 'Request Header >> Authorization' custom field is NOT configured.

  The 'Response Header >> Content-Type' custom field is NOT configured.

comments:
  Manual check shows setting as follows:

  Log format is 'W3C'

  User Agent, User Name, and Referrer are all logged.

  The 'Request Header >> Authorization' custom field is configured.

  The 'Response Header >> Content-Type' custom field is configured.


vuln_id: V-218743
rule_id: SV-218743r1156522_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 03/05/2026
  Site: Default Web Site
  ResultHash: 655AA1250F9F447877A75E551AC19473E3E576A5
  ~~~~~
  WSUS Hosted: False

  The following invalid MIME types for OS shell program extensions are configured:

  .exe
  .dll
  .csh

comments:
  Manual check shows setting as follows:

  WSUS Hosted: False

  No invalid MIME types for OS shell program extensions found.


vuln_id: V-218744
rule_id: SV-218744r1135545_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  Site: Default Web Site
  ResultHash: 273D18146DC4BC86A65EF8CB8BEEC3EE2EA27C2B
  ~~~~~
  Access Policy: Read,Script

  Enabled Handler Mappings:
  -----------------------------------
  Name:		xamlx-ISAPI-4.0_64bit
  Path:			*.xamlx
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		xamlx-ISAPI-4.0_32bit
  Path:			*.xamlx
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		xamlx-Integrated-4.0
  Path:			*.xamlx
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		rules-ISAPI-4.0_64bit
  Path:			*.rules
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		rules-ISAPI-4.0_32bit
  Path:			*.rules
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		rules-Integrated-4.0
  Path:			*.rules
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		xoml-ISAPI-4.0_64bit
  Path:			*.xoml
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		xoml-ISAPI-4.0_32bit
  Path:			*.xoml
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		xoml-Integrated-4.0
  Path:			*.xoml
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		svc-ISAPI-4.0_64bit
  Path:			*.svc
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		svc-ISAPI-4.0_32bit
  Path:			*.svc
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		svc-Integrated-4.0
  Path:			*.svc
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		AXD-ISAPI-4.0_64bit
  Path:			*.axd
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		PageHandlerFactory-ISAPI-4.0_64bit
  Path:			*.aspx
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		SimpleHandlerFactory-ISAPI-4.0_64bit
  Path:			*.ashx
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		WebServiceHandlerFactory-ISAPI-4.0_64bit
  Path:			*.asmx
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		HttpRemotingHandlerFactory-rem-ISAPI-4.0_64bit
  Path:			*.rem
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		HttpRemotingHandlerFactory-soap-ISAPI-4.0_64bit
  Path:			*.soap
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		aspq-ISAPI-4.0_64bit
  Path:			*.aspq
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		cshtm-ISAPI-4.0_64bit
  Path:			*.cshtm
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		cshtml-ISAPI-4.0_64bit
  Path:			*.cshtml
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		vbhtm-ISAPI-4.0_64bit
  Path:			*.vbhtm
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		vbhtml-ISAPI-4.0_64bit
  Path:			*.vbhtml
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		TraceHandler-Integrated-4.0
  Path:			trace.axd
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		WebAdminHandler-Integrated-4.0
  Path:			WebAdmin.axd
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		AssemblyResourceLoader-Integrated-4.0
  Path:			WebResource.axd
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		PageHandlerFactory-Integrated-4.0
  Path:			*.aspx
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		SimpleHandlerFactory-Integrated-4.0
  Path:			*.ashx
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		WebServiceHandlerFactory-Integrated-4.0
  Path:			*.asmx
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		HttpRemotingHandlerFactory-rem-Integrated-4.0
  Path:			*.rem
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		HttpRemotingHandlerFactory-soap-Integrated-4.0
  Path:			*.soap
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		aspq-Integrated-4.0
  Path:			*.aspq
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		cshtm-Integrated-4.0
  Path:			*.cshtm
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		cshtml-Integrated-4.0
  Path:			*.cshtml
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		vbhtm-Integrated-4.0
  Path:			*.vbhtm
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		vbhtml-Integrated-4.0
  Path:			*.vbhtml
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		ScriptHandlerFactoryAppServices-Integrated-4.0
  Path:			*_AppService.axd
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		ScriptResourceIntegrated-4.0
  Path:			*ScriptResource.axd
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		AXD-ISAPI-4.0_32bit
  Path:			*.axd
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		PageHandlerFactory-ISAPI-4.0_32bit
  Path:			*.aspx
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		SimpleHandlerFactory-ISAPI-4.0_32bit
  Path:			*.ashx
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		WebServiceHandlerFactory-ISAPI-4.0_32bit
  Path:			*.asmx
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		HttpRemotingHandlerFactory-rem-ISAPI-4.0_32bit
  Path:			*.rem
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		HttpRemotingHandlerFactory-soap-ISAPI-4.0_32bit
  Path:			*.soap
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		aspq-ISAPI-4.0_32bit
  Path:			*.aspq
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		cshtm-ISAPI-4.0_32bit
  Path:			*.cshtm
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		cshtml-ISAPI-4.0_32bit
  Path:			*.cshtml
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		vbhtm-ISAPI-4.0_32bit
  Path:			*.vbhtm
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		vbhtml-ISAPI-4.0_32bit
  Path:			*.vbhtml
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		SSINC-stm
  Path:			*.stm
  State:		Enabled
  PathType:		File
  Handler:		ServerSideIncludeModule
  ReqAccess:	Script

  Name:		SSINC-shtm
  Path:			*.shtm
  State:		Enabled
  PathType:		File
  Handler:		ServerSideIncludeModule
  ReqAccess:	Script

  Name:		SSINC-shtml
  Path:			*.shtml
  State:		Enabled
  PathType:		File
  Handler:		ServerSideIncludeModule
  ReqAccess:	Script

  Name:		TRACEVerbHandler
  Path:			*
  State:		Enabled
  PathType:		Unspecified
  Handler:		ProtocolSupportModule
  ReqAccess:	None

  Name:		OPTIONSVerbHandler
  Path:			*
  State:		Enabled
  PathType:		Unspecified
  Handler:		ProtocolSupportModule
  ReqAccess:	None

  Name:		ExtensionlessUrlHandler-ISAPI-4.0_32bit
  Path:			*.
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		ExtensionlessUrlHandler-ISAPI-4.0_64bit
  Path:			*.
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		ExtensionlessUrlHandler-Integrated-4.0
  Path:			*.
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		StaticFile
  Path:			*
  State:		Enabled
  PathType:		File or Folder
  Handler:		StaticFileModule,DefaultDocumentModule,DirectoryListingModule
  ReqAccess:	Read

  Disabled Handler Mappings:
  -----------------------------------
  Name:		ISAPI-dll
  Path:			*.dll
  State:		Disabled
  PathType:		File
  Handler:		IsapiModule
  ReqAccess:	Execute

comments:
  Removed mappings to unused or vulnerable scripts on the IIS 10.0 website to prevent unauthorized script execution. This is Not a Finding


vuln_id: V-218745
rule_id: SV-218745r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  Site: Default Web Site
  ResultHash: 2F23BA53ABD5080AF448F9773A244BEC788276EC
  ~~~~~
  Denied file extensions:
  -----------------------------------
  FileExtension:	.asax
  Allowed:		False

  FileExtension:	.ascx
  Allowed:		False

  FileExtension:	.master
  Allowed:		False

  FileExtension:	.skin
  Allowed:		False

  FileExtension:	.browser
  Allowed:		False

  FileExtension:	.sitemap
  Allowed:		False

  FileExtension:	.config
  Allowed:		False

  FileExtension:	.cs
  Allowed:		False

  FileExtension:	.csproj
  Allowed:		False

  FileExtension:	.vb
  Allowed:		False

  FileExtension:	.vbproj
  Allowed:		False

  FileExtension:	.webinfo
  Allowed:		False

  FileExtension:	.licx
  Allowed:		False

  FileExtension:	.resx
  Allowed:		False

  FileExtension:	.resources
  Allowed:		False

  FileExtension:	.mdb
  Allowed:		False

  FileExtension:	.vjsproj
  Allowed:		False

  FileExtension:	.java
  Allowed:		False

  FileExtension:	.jsl
  Allowed:		False

  FileExtension:	.ldb
  Allowed:		False

  FileExtension:	.dsdgm
  Allowed:		False

  FileExtension:	.ssdgm
  Allowed:		False

  FileExtension:	.lsad
  Allowed:		False

  FileExtension:	.ssmap
  Allowed:		False

  FileExtension:	.cd
  Allowed:		False

  FileExtension:	.dsprototype
  Allowed:		False

  FileExtension:	.lsaprototype
  Allowed:		False

  FileExtension:	.sdm
  Allowed:		False

  FileExtension:	.sdmDocument
  Allowed:		False

  FileExtension:	.mdf
  Allowed:		False

  FileExtension:	.ldf
  Allowed:		False

  FileExtension:	.ad
  Allowed:		False

  FileExtension:	.dd
  Allowed:		False

  FileExtension:	.ldd
  Allowed:		False

  FileExtension:	.sd
  Allowed:		False

  FileExtension:	.adprototype
  Allowed:		False

  FileExtension:	.lddprototype
  Allowed:		False

  FileExtension:	.exclude
  Allowed:		False

  FileExtension:	.refresh
  Allowed:		False

  FileExtension:	.compiled
  Allowed:		False

  FileExtension:	.msgx
  Allowed:		False

  FileExtension:	.vsdisco
  Allowed:		False

  FileExtension:	.rules
  Allowed:		False

  Allowed file extensions:
  -----------------------------------
  None

comments:
  Configured IIS 10.0 websites to disable serving specific file types by setting appropriate resource mappings. This is Not a Finding


vuln_id: V-218748
rule_id: SV-218748r1043177_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 03/05/2026
  Site: Default Web Site
  ResultHash: 8E8482E042BD27CE6D91B327DB52B5325B740854
  ~~~~~

  The site is NOT bound to a specific host header on port 80

comments:
  The site is bound to schr-dp-001.schroeder.navy.mil on port 443
  The site is bound to yourwebsite.com on port 443

  This is Not a Finding


vuln_id: V-218749
rule_id: SV-218749r1111805_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 03/05/2026
  Site: Default Web Site
  ResultHash: C9147AB75E3FE047BDF3394C860E38FD3A03A4FC
  ~~~~~
  Client Certificates is NOT set to 'Require'

  Confirm if this this is a public server.  If so, mark this finding as Not Applicable.

comments:
  Set client certificate to  to transmit session identifier to assure integrity. This is Not a Finding

  Client Certificates is set to 'Require'


vuln_id: V-218750
rule_id: SV-218750r1138073_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: 11B73503DAE06F01B5185CC126C80F8941A56D00
  ~~~~~
  Anonymous Authentication is Enabled and using the account 'IUSR' for authentication.

  IUSR is not a member of any privileged groups.


vuln_id: V-218751
rule_id: SV-218751r1043181_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: 4DAFD73A73E142C404EAA5FA34EAB3F3718A717C
  ~~~~~
  Mode is set to 'InProc'


vuln_id: V-218752
rule_id: SV-218752r1111807_rule
status: NotAFinding
comments:
  Manual check shows setting as follows:

  The OS is installed on C:
  The web site is installed on I:

hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 03/05/2026
  Site: Default Web Site
  ResultHash: 82833DC68D5FCB33EF4976B85E80237A71D613C3
  ~~~~~
  Both the OS and the web site are installed on C:


vuln_id: V-218753
rule_id: SV-218753r961152_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: F2EA50F0C244BFF62634234D1860279E15690490
  ~~~~~
  MaxURL is set to '4096'


vuln_id: V-218754
rule_id: SV-218754r1156525_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: 61B975D8C5C29BE38FE820498269486B83933521
  ~~~~~
  MaxAllowedContentLength is set to '30000000'


vuln_id: V-218755
rule_id: SV-218755r961152_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: 0B0E1D157A012760B8EF8577018C2CE9536125C3
  ~~~~~
  MaxQueryString is set to '2048'


vuln_id: V-218756
rule_id: SV-218756r961152_rule
status: NotAFinding
comments:
  Manual check shows setting as follows:

  AllowHighBitCharacters is Disabled

hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 03/05/2026
  Site: Default Web Site
  ResultHash: 545E96FB53E421DBB94A039FB5D6FBC26514D6A0
  ~~~~~
  AllowHighBitCharacters is Enabled


vuln_id: V-218757
rule_id: SV-218757r961152_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: ABDEB31F62077F38682F3B6A94057B49A3CFDE3A
  ~~~~~
  AllowDoubleEscaping is Disabled


vuln_id: V-218758
rule_id: SV-218758r1156527_rule
status: NotAFinding
comments:
  Manual check shows setting as follows:

  AllowUnlisted is Disabled

hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 03/05/2026
  Site: Default Web Site
  ResultHash: B5726175B8459E9B878193D0B97D55FA98562ED9
  ~~~~~
  AllowUnlisted is Enabled


vuln_id: V-218759
rule_id: SV-218759r961158_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: 0F0103BE5E8235FF5226B744537FC12082EF2285
  ~~~~~
  Directory Browsing is Disabled


vuln_id: V-218760
rule_id: SV-218760r1022690_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: 8DD7CFE973D10647A1435F5B797FDBD4463D27D1
  ~~~~~
  Error Responses is configured to 'Detailed errors for local requests and custom error pages for remote requests'

  errorMode:	DetailedLocalOnly


vuln_id: V-218761
rule_id: SV-218761r961167_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: DA86857153490799139F10F11554C3FC6F2FE873
  ~~~~~
  Debug is set to 'False'


vuln_id: V-218762
rule_id: SV-218762r1043182_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: 014F652F7321865AAC624F62B49DF31D1BF1CA97
  ~~~~~
  Idle Time-out is configured to '20' total minutes


vuln_id: V-218763
rule_id: SV-218763r1043182_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: CC80929894FE26706CBF815CB07276E9E7A98AC3
  ~~~~~
  Time-out is configured to '00:15:00'


vuln_id: V-218764
rule_id: SV-218764r961281_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: 32AFF8CF36570A0DC084CA270EE023B4DED1D486
  ~~~~~
  There is nothing preventing an administrator from shutting down either the webservice or an individual IIS site in the event of an attack. Documentation exists describing how.


vuln_id: V-218765
rule_id: SV-218765r961392_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: 6ADE9501D86E927416808AF0B186536D51A249DE
  ~~~~~
  Logs are set to roll over Daily.


vuln_id: V-218766
rule_id: SV-218766r1111809_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: D43BD30938BEE28D70E09D5B397315762DD4C2D3
  ~~~~~
  All ports are PPSM approved.

  Below are the current HTTP and HTTPS bindings:

  http (*:80:)


vuln_id: V-218767
rule_id: SV-218767r1111811_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 03/05/2026
  Site: Default Web Site
  ResultHash: 7B47C3FC645686A5BBF0E23296FB14E0C58713A2
  ~~~~~
  There are no HTTPS bindings on this site.

comments:
  Ensured the IIS 10.0 website accepts only client certificates issued by DoD PKI or DoD-approved PKI Certification Authorities (CAs).


vuln_id: V-218768
rule_id: SV-218768r1156529_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  Site: Default Web Site
  ResultHash: 6275DCDEF057117A4E22688BC519EA5B675A222E
  ~~~~~
  The following SSL flags are missing:

  Ssl
  SslRequireCert
  Ssl128

comments:
  The IIS 10.0 private website employs cryptographic mechanisms (TLS) and require client certificates. This is Not a Finding


  Ssl, SslRequireCert, and Ssl128 are all set.


vuln_id: V-218769
rule_id: SV-218769r961632_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: 88428619BE4167554B71D4EBAEE30C7BD51B4A99
  ~~~~~
  KeepSessionIdSecure is set to 'True'


vuln_id: V-218770
rule_id: SV-218770r1111816_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 03/05/2026
  Site: Default Web Site
  ResultHash: FE11E6C510BB860B5F598EF635D52AFCEA9CEE15
  ~~~~~
  RequireSSL is set to 'False'

  CompressionEnabled is set to 'False'

comments:
  Manual check shows setting as follows:

  RequireSSL is set to 'True'

  CompressionEnabled is set to 'False'


vuln_id: V-218771
rule_id: SV-218771r961863_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: 5335ED9BAD61DF8DC37184AF69529D1843D12936
  ~~~~~
  ApplicationPool:	DefaultAppPool
  WebSiteUsage:	Default Web Site


vuln_id: V-218772
rule_id: SV-218772r1022694_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  Site: Default Web Site
  ResultHash: A56676E8EA3BFCF08B73F6A5B5A76450CBBE9579
  ~~~~~
  Application Pool:	.NET v4.5
  Request Limit:		0

  Application Pool:	.NET v4.5 Classic
  Request Limit:		0

  Application Pool:	DefaultAppPool
  Request Limit:		0

comments:
  The maximum number of requests an application pool can process for each IIS 10.0 website is explicitly set.

  Application Pool:	DefaultAppPool
  Request Limit:		10


vuln_id: V-218775
rule_id: SV-218775r1022696_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: 630A16ADFDB7CF1BE1A54B6AD5648CC5D3357FBA
  ~~~~~
  Compliant AppPools:
  -----------------------------------
  AppPool:	.NET v4.5
  Condition:	time [Enabled=True; LogEnabled=True]

  AppPool:	.NET v4.5 Classic
  Condition:	time [Enabled=True; LogEnabled=True]

  AppPool:	DefaultAppPool
  Condition:	time [Enabled=True; LogEnabled=True]


vuln_id: V-218777
rule_id: SV-218777r961863_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: D20E64BF1B05FA68EEE046BE06AB34AE4CE8C3AF
  ~~~~~
  Application Pool:		.NET v4.5
  Rapid Fail Protection:	True

  Application Pool:		.NET v4.5 Classic
  Rapid Fail Protection:	True

  Application Pool:		DefaultAppPool
  Rapid Fail Protection:	True


vuln_id: V-218778
rule_id: SV-218778r961863_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: B30004B860C1C6BA9D64F62621C3F9D9CB69C162
  ~~~~~
  Application Pool:	.NET v4.5
  Failure Interval:	5

  Application Pool:	.NET v4.5 Classic
  Failure Interval:	5

  Application Pool:	DefaultAppPool
  Failure Interval:	5


vuln_id: V-218779
rule_id: SV-218779r1022698_rule
status: Not_Applicable
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT APPLICABLE on 03/05/2026
  Site: Default Web Site
  ResultHash: 6A077B4054A7B71BCF2A558FC6BFD199ED9070AA
  ~~~~~
  CGI is not installed so this requirement is NA.


vuln_id: V-218782
rule_id: SV-218782r1111818_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
comments:
  Displayed the required DoD consent banner to authenticated users accessing private IIS 10.0 websites. This is Not a Finding


vuln_id: V-278953
rule_id: SV-278953r1135550_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 03/05/2026
  Site: Default Web Site
  ResultHash: 104E498E88DEE469BE248058E3FD241D25AF3ECD
  ~~~~~
  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\HTTP\Parameters
  Value Name:	DisableServerHeader
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-235719
rule_id: SV-235719r1156558_rule
status: NotAFinding
comments:
  Proxy setting are correctly set as follows:

  {"ProxyMode": "direct"}

  This is Not a Finding

hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be OPEN on 03/05/2026
  ResultHash: EC0EC4B4146EC68BE0B5FF96A0FCCA30E8EF2031
  ~~~~~
  Improper configuration detected. Refer to https://docs.microsoft.com/en-us/deployedge/microsoft-edge-policies#proxysettings

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ProxySettings
  Value:		ADD YOUR PROXY CONFIGURATIONS HERE
  Type:		REG_SZ

  Proper configuration of this setting requires that it be enclosed in { } brackets.


vuln_id: V-235720
rule_id: SV-235720r960852_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: C33E388254DDCB5B7A5AA275DCEC3789FA6C6D8C
  ~~~~~
  'Prevent bypassing Microsoft Defender SmartScreen prompts for sites' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	PreventSmartScreenPromptOverride
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235721
rule_id: SV-235721r960852_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 00754A8B44AD87CBB6D5FBC53E664288E16117B4
  ~~~~~
  'Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	PreventSmartScreenPromptOverrideForFiles
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235722
rule_id: SV-235722r960852_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 252F745C52C3FE26367A884C0FFF075A7D5765B7
  ~~~~~
  'Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings' is Not Configured in Group Policy which is acceptable per the STIG.


vuln_id: V-235723
rule_id: SV-235723r960864_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 6A26062584CE53C883FDC08AC7C990D375CD472F
  ~~~~~
  'Configure InPrivate mode availability' is Enabled with 'InPrivate mode disabled'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	InPrivateModeAvailability
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235724
rule_id: SV-235724r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: A95AA40B6F30C779A0CE892F14BD0215ED60B0AA
  ~~~~~
  'Continue running background apps after Microsoft Edge closes' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	BackgroundModeEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235725
rule_id: SV-235725r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: A3DBEC9663EEDC90775D105ED8029C5BC806A409
  ~~~~~
  'Default pop-up window setting' is Enabled with 'Do not allow any site to show pop-ups'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	DefaultPopupsSetting
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-235726
rule_id: SV-235726r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 859E1524C5E43114ADA3981FB6DFA4354BB11E7A
  ~~~~~

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ManagedSearchEngines
  Value:		[{"allow_search_engine_discovery": false},{"is_default": true,"name": "Microsoft Bing","keyword": "bing","search_url": "https://www.bing.com/search?q={searchTerms}"},{"name": "Google","keyword": "google","search_url": "https://www.google.com/search?q={searchTerms}"}]
  Type:		REG_SZ

  Search URLs
  =======================
  https://www.bing.com/search?q={searchTerms}
  https://www.google.com/search?q={searchTerms}


vuln_id: V-235727
rule_id: SV-235727r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 8FC1BA97C73E26DF2F4FFBFA42EEF58E3174020A
  ~~~~~
  'Disable synchronization of data using Microsoft sync services' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	SyncDisabled
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235728
rule_id: SV-235728r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: C3B61B9619246C488256EF969782678101E04209
  ~~~~~
  'Enable network prediction' is Enabled with 'Don't predict network actions on any network connection'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	NetworkPredictionOptions
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-235729
rule_id: SV-235729r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: E3CAF58DF9DE07E23A04EE57FFC5F9C8460C6537
  ~~~~~
  'Enable search suggestions' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	SearchSuggestEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235730
rule_id: SV-235730r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: F08C62B7F2ABE15A36FB514AA57C9D82DC746279
  ~~~~~
  'Allow importing of autofill form data' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportAutofillFormData
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235731
rule_id: SV-235731r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 9C262364743C3FB68606CA959D2E3A2DCA16CB69
  ~~~~~
  'Allow importing of browser settings' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportBrowserSettings
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235732
rule_id: SV-235732r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 16BF98FC3F0EBB1565C797CB6FFC1D57C15A20D6
  ~~~~~
  'Allow importing of cookies' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportCookies
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235733
rule_id: SV-235733r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 63C9813DC2198C4155927B003A768D2286A93864
  ~~~~~
  'Allow importing of extensions' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportExtensions
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235734
rule_id: SV-235734r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 5A369FE00E668F3D5C55ABC808997BA81CD6BF1E
  ~~~~~
  'Allow importing of browsing history' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportHistory
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235735
rule_id: SV-235735r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 8A5E12CFE2D497A7160E25D907CE340169B6750C
  ~~~~~
  'Allow importing of home page settings' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportHomepage
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235736
rule_id: SV-235736r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 94DC9B1B6FE2DD930D8E55CE31A926ACC092E032
  ~~~~~
  'Allow importing of open tabs' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportOpenTabs
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235737
rule_id: SV-235737r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 4C351B4F0B7E4589FBCAC8225414BBCC72F8003B
  ~~~~~
  'Allow importing of payment info' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportPaymentInfo
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235738
rule_id: SV-235738r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 1C95A1EA9C9DCB1DC440C4F491925769F6EA7AD2
  ~~~~~
  'Allow importing of saved passwords' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportSavedPasswords
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235739
rule_id: SV-235739r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: BF82D8CD5BAE85B427F586A1EBFE413B23378C4F
  ~~~~~
  'Computer Configuration/Administrative Templates/Microsoft Edge/Allow importing of search engine settings' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportSearchEngine
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235740
rule_id: SV-235740r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 7F3AD249882C08B8647088E3B2BAE57EC9CB22F2
  ~~~~~
  'Computer Configuration/Administrative Templates/Microsoft Edge/Allow importing of shortcuts' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportShortcuts
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235741
rule_id: SV-235741r1007485_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 7B48931F199FBAC2686E7530ADC669B50010403D
  ~~~~~
  'Allow media autoplay for websites' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	AutoplayAllowed
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235742
rule_id: SV-235742r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 38497FE6B80E6BB81740D721841068941DA03567
  ~~~~~
  'Control use of the WebUSB API' is Enabled with 'Do not allow any site to request access to USB devices via the WebUSB API'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	DefaultWebUsbGuardSetting
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-235743
rule_id: SV-235743r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 1528C14AEEB65CCC54DF466080527EB385DF1760
  ~~~~~
  'Enable Google Cast' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	EnableMediaRouter
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235744
rule_id: SV-235744r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 77C9F2CFAD6FB07DF15769E13BF655A14D6EC237
  ~~~~~
  'Control use of the Web Bluetooth API' is Enabled with 'Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	DefaultWebBluetoothGuardSetting
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-235745
rule_id: SV-235745r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: D09B8C1D767D0AF121E2C7FBFDF4C858A96F2B8A
  ~~~~~
  'Enable AutoFill for credit cards' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	AutofillCreditCardEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235746
rule_id: SV-235746r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: B2677DF844BBD760C645DA2D8809408E9415C159
  ~~~~~
  'Enable AutoFill for addresses' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	AutofillAddressEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235747
rule_id: SV-235747r961038_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 759AF9B5A64AFD60ADA201529452464B1D8B669F
  ~~~~~
  'Enable online OCSP/CRL checks' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	EnableOnlineRevocationChecks
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235748
rule_id: SV-235748r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: B9CCB256B27A09591F64025AEF672F537D8DC814
  ~~~~~
  'Allow personalization of ads, search and news by sending browsing history to Microsoft' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	PersonalizationReportingEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235749
rule_id: SV-235749r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: DBF4B8660CC702E433B75A2A859CD9E4E1FC7B5F
  ~~~~~
  'Computer Configuration/Administrative Templates/Microsoft Edge/Content settings/Default geolocation setting' is Enabled with 'Don't allow any site to track users' physical location'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	DefaultGeolocationSetting
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-235750
rule_id: SV-235750r960864_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: BB37C332F0F43CE9B237493C3740BF5AFCDB70DB
  ~~~~~
  'Computer Configuration/Administrative Templates/Microsoft Edge/Enable deleting browser and download history' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	AllowDeletingBrowserHistory
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235751
rule_id: SV-235751r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: D0C011C3620DE26B3AC5D2A94FE6AC62E823B8E6
  ~~~~~
  'Computer Configuration/Administrative Templates/Microsoft Edge/Control where developer tools can be used' is Enabled with 'Don't allow using the developer tools'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	DeveloperToolsAvailability
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-235752
rule_id: SV-235752r1156563_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: BE3D82589FDCADE0CBAA20C00C665847239339B7
  ~~~~~
  'Allow download restrictions' is Enabled with (1)'BlockDangerousDownloads' or (2)'Block potentially dangerous or unwanted downloads' or (3)'Block all downloads' or (4) 'Block malicious downloads'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	DownloadRestrictions
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235753
rule_id: SV-235753r1015297_rule
status: NotAFinding
comments: URLs are allowlisted for plugin use. This is Not a Finding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: F277020857C97BCB2CDBE776BF649532A4E75FC3
  ~~~~~
  'Allow pop-up windows on specific sites' is Configured

  Allowed popups:
  ===========================
  	[*.]mil
  	[*.]gov


vuln_id: V-235754
rule_id: SV-235754r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 4097A18D2792A95FE262E20A225523C05426B446
  ~~~~~
  'Control which extensions cannot be installed' is Enabled (With '*' added to the list)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist
  Value Name:	1
  Value:		*
  Type:		REG_SZ


vuln_id: V-235755
rule_id: SV-235755r961479_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 74D93E07BB01C85E69D696BD1039ECC68270753C
  ~~~~~
  'Allow specific extensions to be installed' is Not Configured in Group Policy which is acceptable per the STIG.

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallAllowlist
  Value Name:	 (Not found)


vuln_id: V-235756
rule_id: SV-235756r961521_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 7BCE53DE564BDFF816DA0D34AF460FA8B5561B18
  ~~~~~
  'Enable saving passwords to the password manager' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	PasswordManagerEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235758
rule_id: SV-235758r1117151_rule
status: NotAFinding
comments:
  The version of Microsoft Edge running on the system is a supported version.
  This is Not a Finding

hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: C8FEAB4CAE85FA4E90B6C6E61F778F398997D8EF
  ~~~~~
  Microsoft Edge Version: 145.0.3800.70


vuln_id: V-235760
rule_id: SV-235760r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: CDC59BF3B7F9E172DADA2D5A1B99AD5112919D25
  ~~~~~
  'Enable site isolation for every site' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	SitePerProcess
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235761
rule_id: SV-235761r1043177_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: D729C535227E8041CCECF0203A782A4147B1857A
  ~~~~~
  'Supported authentication schemes' is Enabled with 'ntlm,negotiate'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	AuthSchemes
  Value:		ntlm,negotiate
  Type:		REG_SZ


vuln_id: V-235763
rule_id: SV-235763r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 0FE1775D93652DFC1E9031585F819F9158C92E5A
  ~~~~~
  'Configure Microsoft Defender SmartScreen' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	SmartScreenEnabled
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235764
rule_id: SV-235764r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: AF7BFAF51876CD911EA583D31A1AB2F474242704
  ~~~~~
  'Configure Microsoft Defender SmartScreen to block potentially unwanted apps' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	SmartScreenPuaEnabled
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235765
rule_id: SV-235765r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 83E6551EBCA0DB90D3E94FCB2E45DB4FB4E84AAB
  ~~~~~
  'Ask where to save downloaded files' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	PromptForDownloadLocation
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235766
rule_id: SV-235766r1051115_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: BFB209185613574AFDC8D1FDCE5645138B8F0AF6
  ~~~~~
  'Block tracking of users' web-browsing activity' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	TrackingPrevention
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-235767
rule_id: SV-235767r960972_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: F85BD56BBF7FAFBC610EBA052F199608B6E3DE06
  ~~~~~
  'Allow websites to query for available payment methods' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	PaymentMethodQueryEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235768
rule_id: SV-235768r1015298_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 5FE8B17D491D95624AA3D36520DEE4CABCA519E7
  ~~~~~
  'Suggest similar pages when a webpage can't be found' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	AlternateErrorPagesEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235769
rule_id: SV-235769r960981_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: A9C3CB492BC4DCF667581F324F2BF3C87024DD4D
  ~~~~~
  'Allow user feedback' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	UserFeedbackAllowed
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235770
rule_id: SV-235770r960984_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 2D6CF3DC871908B27103BD2A0AADA788DC08FE5D
  ~~~~~
  'Enable the Collections feature' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	EdgeCollectionsEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235771
rule_id: SV-235771r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: AF9F31C9048C1464BABE364BC395F8BF0F0D2874
  ~~~~~
  'Configure the Share experience' is Enabled with 'Don't allow using the Share experience'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ConfigureShare
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235772
rule_id: SV-235772r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: C41C1EBCD929E62126289710DB0512B0C3589702
  ~~~~~
  'Enable guest mode' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	BrowserGuestModeEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235773
rule_id: SV-235773r960993_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: B57A03559EAFB980D5E9D52175B1F7A68F888C51
  ~~~~~
  'Notify a user that a browser restart is recommended or required for pending updates' is Enabled with 'Required'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	RelaunchNotification
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-235774
rule_id: SV-235774r1015299_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: B76F0C6311068EC7685D073365C478451F16B7A8
  ~~~~~
  'Use built-in DNS client' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	BuiltInDnsClientEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-246736
rule_id: SV-246736r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 9F96AAF9C4DC4B5A831AA5160BD50D280B3F5EC2
  ~~~~~
  'Allow QUIC protocol' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	QuicAllowed
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-251694
rule_id: SV-251694r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 53EFE8294F1A016100A439E68BDC4A955D8F191C
  ~~~~~
  'Allow media autoplay on specific sites' is Configured

  Allowed sites:
  ===========================


vuln_id: V-260465
rule_id: SV-260465r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 78DBF7703C4344E1C9FEC6958B7770D32210875B
  ~~~~~
  'Visual search enabled' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	VisualSearchEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-260466
rule_id: SV-260466r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: E2685576C3025DD255C16A3C12819DC1828509E9
  ~~~~~
  'Show Hubs Sidebar' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	HubsSidebarEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-260467
rule_id: SV-260467r960864_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: CC86029292DF41B85ACCCA8CD609A962C4964A04
  ~~~~~
  'Configure cookies' is Enabled: (Keep cookies for the duration of the session, except ones listed in 'SaveCookiesOnExit')

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	DefaultCookiesSetting
  Value:		0x00000004 (4)
  Type:		REG_DWORD


vuln_id: V-266981
rule_id: SV-266981r1169858_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: D584CFBF4BC3ECBB5AAA9121E3B5A91B09C02156
  ~~~~~
  'Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users' is Enabled: (The plain URL without any extra information, such as the page's title.)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ConfigureFriendlyURLFormat
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-279940
rule_id: SV-279940r1156561_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 502C8B71437749D29CB3E33985BDF72B0D30248E
  ~~~~~
  'Control access to Microsoft 365 Copilot writing assistance in Microsoft Edge for Business' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ComposeInlineEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


# audit_log

entity_type: system
action: startup_config
changed_by: system
changed_at: 2026-02-26T18:56:37.719184+00:00
new_value:
  session_timeout=30m, rate_limit=60/min, registration_enabled=true, session_secure=default, csrf_secret_set=False


# users

username: admin
email: admin@csids.local
role: admin
created_at: 2026-02-09T13:00:22.036949
last_login: 2026-02-19T16:27:21.393479
password_changed_at: 2026-02-09T13:00:22.036949
password_hash:
  pbkdf2:7f69f12b9f9e83d3bafe3db5e6bb8bed:1a3722ee8b18a5ff13ed8ce72088eb0a34b596efc3c83c83a404178ee6d69139


# nessus_findings

plugin_name: Unencrypted Telnet Server
plugin_family: Misc.
risk_factor: Medium
hostname: 164.231.187.7
host_ip: 164.231.187.7
protocol: tcp
svc_name: telnet
synopsis: The remote Telnet server transmits traffic in cleartext.
solution: Disable the Telnet service and use SSH instead.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The remote host is running a Telnet server over an unencrypted channel.

  Using Telnet over an unencrypted channel is not recommended as logins, passwords, and commands are transferred in cleartext. This allows a remote, man-in-the-middle attacker to eavesdrop on a Telnet session to obtain credentials or other sensitive information and to modify traffic exchanged between a client and server.

  SSH is preferred over Telnet since it protects credentials from eavesdropping and can tunnel additional data streams such as an X11 session.

plugin_output:
  Nessus collected the following banner from the remote Telnet server :

  ------------------------------ snip ------------------------------

  Sorry, the maximum number of telnet sessions are active.  Try again later.

  ------------------------------ snip ------------------------------


plugin_name: SSH Server CBC Mode Ciphers Enabled
plugin_family: Misc.
risk_factor: Low
hostname: 164.231.187.7
host_ip: 164.231.187.7
protocol: tcp
svc_name: ssh
synopsis: The SSH server is configured to use Cipher Block Chaining.
cves: CVE-2008-5161
xrefs: CERT:958563, CWE:200
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The SSH server is configured to support Cipher Block Chaining (CBC) encryption.  This may allow an attacker to recover the plaintext message from the ciphertext. 

  Note that this plugin only checks for the options of the SSH server and does not check for vulnerable software versions.

solution:
  Contact the vendor or consult product documentation to disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryption.

plugin_output:
  The following client-to-server Cipher Block Chaining (CBC) algorithms
  are supported : 

    aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,3des-cbc

  The following server-to-client Cipher Block Chaining (CBC) algorithms
  are supported : 

    aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,3des-cbc


plugin_name: SSH Weak MAC Algorithms Enabled
plugin_family: Misc.
risk_factor: Low
hostname: 164.231.187.7
host_ip: 164.231.187.7
protocol: tcp
svc_name: ssh
synopsis: The remote SSH server is configured to allow MD5 and 96-bit MAC algorithms.
solution: Contact the vendor or consult product documentation to disable MD5 and 96-bit MAC algorithms.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The remote SSH server is configured to allow either MD5 or 96-bit MAC algorithms, both of which are considered weak.

  Note that this plugin only checks for the options of the SSH server, and it does not check for vulnerable software versions.

plugin_output:
  The following client-to-server Message Authentication Code (MAC) algorithms
  are supported : 

    hmac-sha1-96,hmac-md5,hmac-sha1,hmac-md5-96

  The following server-to-client Message Authentication Code (MAC) algorithms
  are supported : 

    hmac-sha1-96,hmac-md5,hmac-sha1,hmac-md5-96


plugin_name: SSH Weak Key Exchange Algorithms Enabled
plugin_family: Misc.
risk_factor: Low
hostname: 164.231.187.7
host_ip: 164.231.187.7
protocol: tcp
svc_name: ssh
synopsis: The remote SSH server is configured to allow weak key exchange algorithms.
solution: Contact the vendor or consult product documentation to disable the weak algorithms.
see_also: https://datatracker.ietf.org/doc/html/rfc9142
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The remote SSH server is configured to allow key exchange algorithms which are considered weak.

  This is based on the IETF draft document Key Exchange (KEX) Method Updates and Recommendations for Secure Shell (SSH) RFC9142. Section 4 lists guidance on key exchange algorithms that SHOULD NOT and MUST NOT be enabled. This includes:

    diffie-hellman-group-exchange-sha1

    diffie-hellman-group1-sha1

    gss-gex-sha1-*

    gss-group1-sha1-*

    gss-group14-sha1-*

    rsa1024-sha1

  Note that this plugin only checks for the options of the SSH server, and it does not check for vulnerable software versions.

plugin_output:
  The following weak key exchange algorithms are enabled : 

    diffie-hellman-group14-sha1,diffie-hellman-group1-sha1


plugin_name: ICMP Timestamp Request Remote Date Disclosure
plugin_family: General
risk_factor: Low
hostname: 164.231.187.2
host_ip: 164.231.187.2
protocol: icmp
svc_name: general
synopsis: It is possible to determine the exact time set on the remote host.
solution: Filter out the ICMP timestamp requests (13), and the outgoing ICMP timestamp replies (14).
plugin_output: The difference between the local and remote clocks is -1742 seconds.
cves: CVE-1999-0524
xrefs: CWE:200
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The remote host answers to an ICMP timestamp request.  This allows an attacker to know the date that is set on the targeted machine, which may assist an unauthenticated, remote attacker in defeating time-based authentication protocols.

  Timestamps returned from machines running Windows Vista / 7 / 2008 / 2008 R2 are deliberately incorrect, but usually within 1000 seconds of the actual system time.


plugin_name: Unencrypted Telnet Server
plugin_family: Misc.
risk_factor: Medium
hostname: 164.231.187.2
host_ip: 164.231.187.2
protocol: tcp
svc_name: telnet
synopsis: The remote Telnet server transmits traffic in cleartext.
solution: Disable the Telnet service and use SSH instead.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The remote host is running a Telnet server over an unencrypted channel.

  Using Telnet over an unencrypted channel is not recommended as logins, passwords, and commands are transferred in cleartext. This allows a remote, man-in-the-middle attacker to eavesdrop on a Telnet session to obtain credentials or other sensitive information and to modify traffic exchanged between a client and server.

  SSH is preferred over Telnet since it protects credentials from eavesdropping and can tunnel additional data streams such as an X11 session.

plugin_output:
  Nessus collected the following banner from the remote Telnet server :

  ------------------------------ snip ------------------------------
  C
  ##### Military Sealift Command (MSC) #####
  ##### MSC Corporate Data Center (MCDC) #####
  -------------------------------------------------------------------------
  DOD WARNING BANNER
  -------------------------------------------------------------------------
  You are accessing a U.S. Government (USG) Information System (IS) that
  is provided for USG-authorized use only. By using this IS (which includes
  any device attached to this IS), you consent to the following conditions:
  -The USG routinely intercepts and monitors communications on this IS
  for purposes including, but not limited to, penetration testing, COMSEC
  monitoring, network operations and defense, personnel misconduct (PM),
  law enforcement (LE), and counterintelligence (CI) investigations.
  -At any time, the USG may inspect and seize data stored on this IS.
  -Communications using, or data stored on, this IS are not private, are
  subject to routine monitoring, interception, and search, and may be
  disclosed or used for any USG authorized purpose.
  -This IS includes security measures (e.g., authentication and access
  controls) to protect USG interests--not for your personal benefit or
  privacy.
  -Notwithstanding the above, using this IS does not constitute consent to
  PM, LE or CI investigative searching or monitoring of the content of
  privileged communications, or work product, related to personal
  representation or services by attorneys, psychotherapists, or clergy,
  and their assistants. Such communications and work product are private
  and confidential. See User Agreement for details.
  -------------------------------------------------------------------------
  DOD WARNING BANNER
  -------------------------------------------------------------------------


  User Access Verification

  Username: 
  ------------------------------ snip ------------------------------


plugin_name: Network Time Protocol (NTP) Mode 6 Scanner
plugin_family: Misc.
risk_factor: Medium
hostname: 164.231.187.2
host_ip: 164.231.187.2
protocol: udp
svc_name: ntp
synopsis: The remote NTP server responds to mode 6 queries.
solution: Restrict NTP mode 6 queries.
see_also:
  https://www.nessus.org/u?18e62de1
  https://www.virtuesecurity.com/kb/ntp-mode-6-vulnerabilities/

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The remote NTP server responds to mode 6 queries. Devices that respond to these queries have the potential to be used in NTP amplification attacks. An unauthenticated, remote attacker could potentially exploit this, via a specially crafted mode 6 query, to cause a reflected denial of service condition.

plugin_output:
  Nessus elicited the following response from the remote
    host by sending an NTP mode 6 query :

  'version="4", processor="unknown", system="UNIX", leap=0, stratum=4,
  precision=-19, rootdelay=, rootdisp=, refid=164.231.69.13,
  reftime=0xED54EC2F.CF835BE5, clock=0xED54F039.E9BE6DA1, peer=50512,
  tc=10, mintc=3, offset=, frequency=, sys_jitter=, clk_jitter=,
  clk_wander='


plugin_name: SSH Weak Key Exchange Algorithms Enabled
plugin_family: Misc.
risk_factor: Low
hostname: 164.231.187.2
host_ip: 164.231.187.2
protocol: tcp
svc_name: ssh
synopsis: The remote SSH server is configured to allow weak key exchange algorithms.
solution: Contact the vendor or consult product documentation to disable the weak algorithms.
see_also: https://datatracker.ietf.org/doc/html/rfc9142
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 602 characters]

plugin_output:
  The following weak key exchange algorithms are enabled : 

    diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
    diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1


plugin_name: Network Time Protocol (NTP) Mode 6 Scanner
plugin_family: Misc.
risk_factor: Medium
hostname: 164.231.187.1
host_ip: 164.231.187.1
protocol: udp
svc_name: ntp
synopsis: The remote NTP server responds to mode 6 queries.
solution: Restrict NTP mode 6 queries.
see_also:
  https://www.nessus.org/u?18e62de1
  https://www.virtuesecurity.com/kb/ntp-mode-6-vulnerabilities/

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The remote NTP server responds to mode 6 queries. Devices that respond to these queries have the potential to be used in NTP amplification attacks. An unauthenticated, remote attacker could potentially exploit this, via a specially crafted mode 6 query, to cause a reflected denial of service condition.

plugin_output:
  Nessus elicited the following response from the remote
    host by sending an NTP mode 6 query :

  'version="4", processor="unknown", system="UNIX", leap=0, stratum=4,
  precision=-10, rootdelay=820.000, rootdisp=47.724, refid=164.231.69.13,
  reftime=0xED54E95E.66E979F0, clock=0xED54EE44.F70A4018, peer=48652,
  tc=10, mintc=3, offset=-0.499, frequency=-57.167, sys_jitter=5.775,
  clk_jitter=10.349, clk_wander=0.002'


plugin_name: ICMP Timestamp Request Remote Date Disclosure
plugin_family: General
risk_factor: Low
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: icmp
svc_name: general
synopsis: It is possible to determine the exact time set on the remote host.
solution: Filter out the ICMP timestamp requests (13), and the outgoing ICMP timestamp replies (14).
cves: CVE-1999-0524
xrefs: CWE:200
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The remote host answers to an ICMP timestamp request.  This allows an attacker to know the date that is set on the targeted machine, which may assist an unauthenticated, remote attacker in defeating time-based authentication protocols.

  Timestamps returned from machines running Windows Vista / 7 / 2008 / 2008 R2 are deliberately incorrect, but usually within 1000 seconds of the actual system time.

plugin_output:
  This host returns non-standard timestamps (high bit is set)
  The ICMP timestamps might be in little endian format (not in network format)
  The remote clock is synchronized with the local clock.


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: www
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The server's X.509 certificate cannot be trusted. This situation can occur in three different ways, in which the chain of trust can be broken, as stated below :

    - First, the top of the certificate chain sent by the     server might not be descended from a known public     certificate authority. This can occur either when the     top of the chain is an unrecognized, self-signed     certificate, or when intermediate certificates are     missing that would connect the top of the certificate     chain to a known public certificate authority.

    - Second, the certificate chain may contain a certificate     that is not valid at the time of the scan. This can     occur either when the scan occurs before one of the     certificate's 'notBefore' dates, or after one of the     certificate's 'notAfter' dates.

    - Third, the certificate chain may contain a signature     that either didn't match the certificate's information     or could not be verified. Bad signatures can be fixed by     getting the certificate with the bad signature to be     re-signed by its issuer. Signatures that could not be     verified are the result of the certificate's issuer     using a signing algorithm that Nessus either does not     support or does not recognize.

  If the remote host is a public host in production, any break in the chain makes it more difficult for users to verify the authenticity and identity of the web server. This could make it easier to carry out man-in-the-middle attacks against the remote host.

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : C=US/O=U.S. Government/OU=DoD/OU=PKI/CN=DoD Root CA 3
  |-Issuer  : C=US/O=U.S. Government/OU=DoD/OU=PKI/CN=DoD Root CA 3


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The server's X.509 certificate cannot be trusted. This situation can occur in three different ways, in which the chain of trust can be broken, as stated below :

    - First, the top of the certificate chain sent by the     server might not be descended from a known public     certificate authority. This can occur either when the     top of the chain is an unrecognized, self-signed     certificate, or when intermediate certificates are     missing that would connect the top of the certificate     chain to a known public certificate authority.

    - Second, the certificate chain may contain a certificate     that is not valid at the time of the scan. This can     occur either when the scan occurs before one of the     certificate's 'notBefore' dates, or after one of the     certificate's 'notAfter' dates.

    - Third, the certificate chain may contain a signature     that either didn't match the certificate's information     or could not be verified. Bad signatures can be fixed by     getting the certificate with the bad signature to be     re-signed by its issuer. Signatures that could not be     verified are the result of the certificate's issuer     using a signing algorithm that Nessus either does not     support or does not recognize.

  If the remote host is a public host in production, any break in the chain makes it more difficult for users to verify the authenticity and identity of the web server. This could make it easier to carry out man-in-the-middle attacks against the remote host.

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-AP-002.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-AP-002.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: www
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The X.509 certificate chain for this service is not signed by a recognized certificate authority.  If the remote host is a public host in production, this nullifies the use of SSL as anyone could establish a man-in-the-middle attack against the remote host. 

  Note that this plugin does not check for certificate chains that end in a certificate that is not self-signed, but is signed by an unrecognized certificate authority.

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : C=US/O=U.S. Government/OU=DoD/OU=PKI/CN=DoD Root CA 3


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The X.509 certificate chain for this service is not signed by a recognized certificate authority.  If the remote host is a public host in production, this nullifies the use of SSL as anyone could establish a man-in-the-middle attack against the remote host. 

  Note that this plugin does not check for certificate chains that end in a certificate that is not self-signed, but is signed by an unrecognized certificate authority.

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-AP-002.MONTFORD-POINT.navy.mil


plugin_name: ICMP Timestamp Request Remote Date Disclosure
plugin_family: General
risk_factor: Low
hostname: MONT-DB-002.MONTFORD-POINT.navy.mil
host_ip: 164.231.187.38
protocol: icmp
svc_name: general
synopsis: It is possible to determine the exact time set on the remote host.
solution: Filter out the ICMP timestamp requests (13), and the outgoing ICMP timestamp replies (14).
cves: CVE-1999-0524
xrefs: CWE:200
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 400 characters]

plugin_output:
  The ICMP timestamps seem to be in little endian format (not in network format)
  The remote clock is synchronized with the local clock.


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-DB-002.MONTFORD-POINT.navy.mil
host_ip: 164.231.187.38
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The server's X.509 certificate cannot be trusted. This situation can occur in three different ways, in which the chain of trust can be broken, as stated below :

    - First, the top of the certificate chain sent by the     server might not be descended from a known public     certificate authority. This can occur either when the     top of the chain is an unrecognized, self-signed     certificate, or when intermediate certificates are     missing that would connect the top of the certificate     chain to a known public certificate authority.

    - Second, the certificate chain may contain a certificate     that is not valid at the time of the scan. This can     occur either when the scan occurs before one of the     certificate's 'notBefore' dates, or after one of the     certificate's 'notAfter' dates.

    - Third, the certificate chain may contain a signature     that either didn't match the certificate's information     or could not be verified. Bad signatures can be fixed by     getting the certificate with the bad signature to be     re-signed by its issuer. Signatures that could not be     verified are the result of the certificate's issuer     using a signing algorithm that Nessus either does not     support or does not recognize.

  If the remote host is a public host in production, any break in the chain makes it more difficult for users to verify the authenticity and identity of the web server. This could make it easier to carry out man-in-the-middle attacks against the remote host.

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-DB-002.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-DB-002.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-DB-002.MONTFORD-POINT.navy.mil
host_ip: 164.231.187.38
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The X.509 certificate chain for this service is not signed by a recognized certificate authority.  If the remote host is a public host in production, this nullifies the use of SSL as anyone could establish a man-in-the-middle attack against the remote host. 

  Note that this plugin does not check for certificate chains that end in a certificate that is not self-signed, but is signed by an unrecognized certificate authority.

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-DB-002.MONTFORD-POINT.navy.mil


plugin_name: SSL Certificate with Wrong Hostname
plugin_family: General
risk_factor: Medium
hostname: MONT-BE-002
host_ip: 164.231.187.37
protocol: tcp
svc_name: mssql
synopsis: The SSL certificate for this service is for a different host.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The 'commonName' (CN) attribute of the SSL certificate presented for this service is for a different machine.

plugin_output:
  The identities known by Nessus are :

    164.231.187.37
    mont-be-002
    mont-be-002.montford-point.navy.mil
    164.231.187.37

  The Common Name in the certificate is :

    SSL_Self_Signed_Fallback


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-BE-002
host_ip: 164.231.187.37
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-BE-002.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-BE-002.MONTFORD-POINT.navy.mil


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-BE-002
host_ip: 164.231.187.37
protocol: tcp
svc_name: mssql
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=SSL_Self_Signed_Fallback
  |-Issuer  : CN=SSL_Self_Signed_Fallback


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-BE-002
host_ip: 164.231.187.37
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-BE-002.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-BE-002
host_ip: 164.231.187.37
protocol: tcp
svc_name: mssql
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=SSL_Self_Signed_Fallback


plugin_name: Microsoft Exchange Server Unsupported Version Detection
plugin_family: Windows
risk_factor: Critical
hostname: MONT-MB-002
host_ip: 164.231.187.36
protocol: tcp
svc_name: cifs
synopsis: The Microsoft Exchange Server running on the remote host is no longer supported.
solution: Upgrade to a version of Microsoft Exchange Server that is currently supported.
xrefs: IAVA:0001-A-0554
see_also:
  http://www.nessus.org/u?a7ccf95d
  http://www.nessus.org/u?bdbd11f6

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  According to its self-reported version number, the installation of Microsoft Exchange Server on the remote host is no longer supported.

  Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities.

plugin_output:
  The remote host is running Microsoft Exchange Server 2016 CU23.
  Microsoft Exchange Server 2016 is no longer supported.


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-MB-002
host_ip: 164.231.187.36
protocol: tcp
svc_name: www
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : C=US/O=U.S. Government/OU=DoD/OU=PKI/CN=DOD SW CA-67
  |-Issuer  : C=US/O=U.S. Government/OU=DoD/OU=PKI/CN=DoD Root CA 3


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-MB-002
host_ip: 164.231.187.36
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-MB-002.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-MB-002.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-MB-002
host_ip: 164.231.187.36
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-MB-002.MONTFORD-POINT.navy.mil


plugin_name: HSTS Missing From HTTPS Server (RFC 6797)
plugin_family: Web Servers
risk_factor: Medium
hostname: MONT-MB-002
host_ip: 164.231.187.36
protocol: tcp
svc_name: www
synopsis: The remote web server is not enforcing HSTS, as defined by RFC 6797.
solution: Configure the remote web server to use HSTS.
see_also: https://tools.ietf.org/html/rfc6797
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The remote web server is not enforcing HSTS, as defined by RFC 6797. HSTS is an optional response header that can be configured on the server to instruct the browser to only communicate via HTTPS. The lack of HSTS allows downgrade attacks, SSL-stripping man-in-the-middle attacks, and weakens cookie-hijacking protections.

plugin_output:
  HTTP/1.1 302 Moved Temporarily

  Cache-Control: no-cache
  Pragma: no-cache
  Location: https://164.231.187.36/owa/
  Server: Microsoft-IIS/10.0
  X-FEServer: MONT-MB-002
  X-RequestId: 2e24f2d9-19f9-469d-96fc-78ea03ccbe40
  Date: Fri, 06 Mar 2026 05:42:23 GMT
  Connection: close
  Content-Length: 0


  The remote HTTPS server does not send the HTTP
  "Strict-Transport-Security" header.


plugin_name: Security Updates for Microsoft Exchange Server (December 2025)
plugin_family: Windows : Microsoft Bulletins
risk_factor: High
hostname: MONT-MB-002
host_ip: 164.231.187.36
protocol: tcp
svc_name: cifs
synopsis: The Microsoft Exchange Server installed on the remote host is affected by multiple vulnerabilities.
cves: CVE-2025-64666, CVE-2025-64667
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the December, 2025 security bulletin.

    - Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges     over a network. (CVE-2025-64666)

    - User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an     unauthorized attacker to perform spoofing over a network. (CVE-2025-64667)

  Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

solution:
  Microsoft has released the following security updates to address this issue:
    -KB5071873
    -KB5071874
    -KB5071875

plugin_output:
  Path              : E:\ExchangeV15\
    Installed version : 15.1.2507.61
    Fixed version     : 15.1.2507.63

xrefs:
  MSFT:MS25-5071873, MSFT:MS25-5071874, MSFT:MS25-5071875, MSKB:5071873, MSKB:5071874, MSKB:5071875, IAVA:2025-A-0913


plugin_name: Security Updates for Microsoft Exchange Server (February 2026)
plugin_family: Windows : Microsoft Bulletins
risk_factor: Medium
hostname: MONT-MB-002
host_ip: 164.231.187.36
protocol: tcp
svc_name: cifs
synopsis: The Microsoft Exchange Server installed on the remote host is affected by a vulnerability.
cves: CVE-2026-21527
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability as referenced in the February, 2026 security bulletin.

    - User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an     unauthorized attacker to perform spoofing over a network. (CVE-2026-21527)

  Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

solution:
  Microsoft has released the following security updates to address this issue:
    -KB5074993
    -KB5074994
    -KB5074995

plugin_output:
  Path              : E:\ExchangeV15\
    Installed version : 15.1.2507.61
    Fixed version     : 15.1.2507.66

xrefs:
  MSFT:MS26-5074993, MSFT:MS26-5074994, MSFT:MS26-5074995, MSKB:5074993, MSKB:5074994, MSKB:5074995, IAVA:2026-A-0127

see_also:
  https://support.microsoft.com/help/5074993
  https://support.microsoft.com/help/5074994
  https://support.microsoft.com/help/5074995


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-DC-004
host_ip: 164.231.187.35
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-DC-004.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-DC-004.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-DC-004
host_ip: 164.231.187.35
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-DC-004.MONTFORD-POINT.navy.mil


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-DC-003
host_ip: 164.231.187.34
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-DC-003.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-DC-003.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-DC-003
host_ip: 164.231.187.34
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-DC-003.MONTFORD-POINT.navy.mil


plugin_name: IP Forwarding Enabled
plugin_family: Firewalls
risk_factor: Medium
hostname: 164.231.187.33
host_ip: 164.231.187.33
protocol: tcp
svc_name: general
synopsis: The remote host has IP forwarding enabled.
cves: CVE-1999-0511
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The remote host has IP forwarding enabled. An attacker can exploit this to route packets through the host and potentially bypass some firewalls / routers / NAC filtering.

  Unless the remote host is a router, it is recommended that you disable IP forwarding.

solution:
  On Linux, you can disable IP forwarding by doing :

  echo 0 > /proc/sys/net/ipv4/ip_forward

  On Windows, set the key 'IPEnableRouter' to 0 under

  HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters

  On Mac OS X, you can disable IP forwarding by executing the command :

  sysctl -w net.inet.ip.forwarding=0

  For other systems, check with your vendor.

plugin_output:
  IP forwarding appears to be enabled on the remote host.

   Detected local MAC Address        : 00155dcdd503
   Response from local MAC Address   : 00155dcdd503

   Detected Gateway MAC Address      : 2c0be9d7bd41
   Response from Gateway MAC Address : 2c0be9d7bd41


plugin_name: Network Time Protocol (NTP) Mode 6 Scanner
plugin_family: Misc.
risk_factor: Medium
hostname: 164.231.187.33
host_ip: 164.231.187.33
protocol: udp
svc_name: ntp
synopsis: The remote NTP server responds to mode 6 queries.
solution: Restrict NTP mode 6 queries.
see_also:
  https://www.nessus.org/u?18e62de1
  https://www.virtuesecurity.com/kb/ntp-mode-6-vulnerabilities/

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The remote NTP server responds to mode 6 queries. Devices that respond to these queries have the potential to be used in NTP amplification attacks. An unauthenticated, remote attacker could potentially exploit this, via a specially crafted mode 6 query, to cause a reflected denial of service condition.

plugin_output:
  Nessus elicited the following response from the remote
    host by sending an NTP mode 6 query :

  'version="4", processor="unknown", system="UNIX", leap=0, stratum=4,
  precision=-19, rootdelay=, rootdisp=, refid=164.231.69.13,
  reftime=0xED54F043.CDF047B9, clock=0xED54F07F.09091CE0, peer=50512,
  tc=10, mintc=3, offset=, frequency=, sys_jitter=, clk_jitter=,
  clk_wander='


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: 164.231.187.122
host_ip: 164.231.187.122
protocol: tcp
svc_name: www
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : C=US/ST=CT/L=Ledyard/O=Emprise Corporation/OU=ESTA/CN=sip-edock-server-001-081/E=support@emprisecorporation.com/2.16.840.1.113730.1.13=001-081
  |-Issuer  : C=US/ST=CT/L=Ledyard/O=Emprise Corporation/OU=ESTA/CN=Military Sealift Command SIP/PENG CA/E=support@emprisecorporation.com/2.16.840.1.113730.1.13=


plugin_name: TLS Version 1.0 Protocol Detection
plugin_family: Service detection
risk_factor: Medium
hostname: 164.231.187.122
host_ip: 164.231.187.122
protocol: tcp
svc_name: www
synopsis: The remote service encrypts traffic using an older version of TLS.
solution: Enable support for TLS 1.2 and 1.3, and disable support for TLS 1.0.
plugin_output: TLSv1 is enabled and the server supports at least one cipher.
xrefs: CWE:327
see_also: https://tools.ietf.org/html/draft-ietf-tls-oldversions-deprecate-00
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The remote service accepts connections encrypted using TLS 1.0. TLS 1.0 has a number of cryptographic design flaws. Modern implementations of TLS 1.0 mitigate these problems, but newer versions of TLS like 1.2 and 1.3 are designed against these flaws and should be used whenever possible.

  As of March 31, 2020, Endpoints that aren’t enabled for TLS 1.2 and higher will no longer function properly with major web browsers and major vendors.

  PCI DSS v3.2 requires that TLS 1.0 be disabled entirely by June 30, 2018, except for POS POI terminals (and the SSL/TLS termination points to which they connect) that can be verified as not being susceptible to any known exploits.


plugin_name: TLS Version 1.1 Deprecated Protocol
plugin_family: Service detection
risk_factor: Medium
hostname: 164.231.187.122
host_ip: 164.231.187.122
protocol: tcp
svc_name: www
synopsis: The remote service encrypts traffic using an older version of TLS.
solution: Enable support for TLS 1.2 and/or 1.3, and disable support for TLS 1.1.
plugin_output: TLSv1.1 is enabled and the server supports at least one cipher.
xrefs: CWE:327
see_also:
  https://datatracker.ietf.org/doc/html/rfc8996
  http://www.nessus.org/u?c8ae820d

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The remote service accepts connections encrypted using TLS 1.1. TLS 1.1 lacks support for current and recommended cipher suites. Ciphers that support encryption before MAC computation, and authenticated encryption modes such as GCM cannot be used with TLS 1.1

  As of March 31, 2020, Endpoints that are not enabled for TLS 1.2 and higher will no longer function properly with major web browsers and major vendors.


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: 164.231.187.121
host_ip: 164.231.187.121
protocol: tcp
svc_name: www
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : C=US/ST=CT/L=Ledyard/O=Emprise Corporation/OU=ESTA/CN=sip-edock-server-001-080/E=support@emprisecorporation.com/2.16.840.1.113730.1.13=001-080
  |-Issuer  : C=US/ST=CT/L=Ledyard/O=Emprise Corporation/OU=ESTA/CN=Military Sealift Command SIP/PENG CA/E=support@emprisecorporation.com/2.16.840.1.113730.1.13=


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92010
host_ip: 164.231.187.45
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-WS-92010.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-WS-92010.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92010
host_ip: 164.231.187.45
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-WS-92010.MONTFORD-POINT.navy.mil


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-WS-92010
host_ip: 164.231.187.45
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The version of Apache Log4j on the remote host is 2.0-beta9 through 2.25.2. The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the verifyHostName https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-attr-verifyHostName configuration attribute or the log4j2.sslVerifyHostName https://logging.apache.org/log4j/2.x/manual/systemproperties.html#log4j2.sslVerifyHostName system property is set to true. This issue may allow a man-in-the-middle attacker to intercept or redirect log traffic under the following conditions:

    - The attacker is able to intercept or redirect network traffic between the client and the log receiver.
   
    - The attacker can present a server certificate issued by a certification authority trusted by the Socket     Appender’s configured trust store (or by the default Java trust store if no custom trust store is     configured).

  Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

plugin_output:
  Path              : C:\Program Files\CMP\data\log4j-core-2.18.0.jar
    Installed version : 2.18.0
    Fixed version     : 2.25.3


plugin_name: Microsoft Edge (Chromium) < 145.0.3800.58 (CVE-2026-0102)
plugin_family: Windows
risk_factor: Low
hostname: MONT-WS-92010
host_ip: 164.231.187.45
protocol: tcp
svc_name: cifs
synopsis: The remote host has an web browser installed that is affected by a vulnerability.
solution: Upgrade to Microsoft Edge version 145.0.3800.58 or later.
cves: CVE-2026-0102
xrefs: IAVA:2026-A-0168
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The version of Microsoft Edge installed on the remote Windows host is prior to 145.0.3800.58. It is, therefore, affected by a vulnerability as referenced in the February 14, 2026 advisory.

    - Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially     without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses,     email, or phone number metadata. (CVE-2026-0102)

  Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

plugin_output:
  Path              : C:\Program Files (x86)\Microsoft\Edge\Application
    Installed version : 144.0.3719.115
    Fixed version     : 145.0.3800.58

see_also:
  http://www.nessus.org/u?73998014
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0102


plugin_name: Microsoft Edge (Chromium) < 144.0.3719.130 (CVE-2026-2441)
plugin_family: Windows
risk_factor: Critical
hostname: MONT-WS-92010
host_ip: 164.231.187.45
protocol: tcp
svc_name: cifs
synopsis: The remote host has an web browser installed that is affected by a vulnerability.
solution: Upgrade to Microsoft Edge version 144.0.3719.130 or later.
cves: CVE-2026-2441
xrefs: IAVA:2026-A-0168, IAVA:2026-A-0162
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The version of Microsoft Edge installed on the remote Windows host is prior to 144.0.3719.130. It is, therefore, affected by a vulnerability as referenced in the February 17, 2026 advisory.

    - Use after free in CSS allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (CVE-2026-2441)

  Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

plugin_output:
  Path              : C:\Program Files (x86)\Microsoft\Edge\Application
    Installed version : 144.0.3719.115
    Fixed version     : 144.0.3719.130

see_also:
  http://www.nessus.org/u?73998014
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2441


plugin_name: Microsoft Edge (Chromium) < 145.0.3800.70 Multiple Vulnerabilities
plugin_family: Windows
risk_factor: Critical
hostname: MONT-WS-92010
host_ip: 164.231.187.45
protocol: tcp
svc_name: cifs
synopsis: The remote host has an web browser installed that is affected by multiple vulnerabilities.
solution: Upgrade to Microsoft Edge version 145.0.3800.70 or later.
cves: CVE-2026-2648, CVE-2026-2649, CVE-2026-2650
xrefs: IAVA:2026-A-0162
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The version of Microsoft Edge installed on the remote Windows host is prior to 145.0.3800.70. It is, therefore, affected by multiple vulnerabilities as referenced in the February 20, 2026 advisory.

    - Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2026-2650)

    - Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to     perform an out of bounds memory write via a crafted PDF file. (Chromium security severity: High)     (CVE-2026-2648)

    - Integer overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2026-2649)

  Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

plugin_output:
  Path              : C:\Program Files (x86)\Microsoft\Edge\Application
    Installed version : 144.0.3719.115
    Fixed version     : 145.0.3800.70

see_also:
  http://www.nessus.org/u?3a37a9de
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2648
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2649
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2650


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-DP-001
host_ip: 164.231.187.44
protocol: tcp
svc_name: www
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-DP-001.MONTFORD-POINT.NAVY.MIL
  |-Issuer  : CN=SMS Issuing


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-DP-001
host_ip: 164.231.187.44
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-DP-001.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-DP-001.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-DP-001
host_ip: 164.231.187.44
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-DP-001.MONTFORD-POINT.navy.mil


plugin_name: HSTS Missing From HTTPS Server (RFC 6797)
plugin_family: Web Servers
risk_factor: Medium
hostname: MONT-DP-001
host_ip: 164.231.187.44
protocol: tcp
svc_name: www
synopsis: The remote web server is not enforcing HSTS, as defined by RFC 6797.
solution: Configure the remote web server to use HSTS.
see_also: https://tools.ietf.org/html/rfc6797
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The remote web server is not enforcing HSTS, as defined by RFC 6797. HSTS is an optional response header that can be configured on the server to instruct the browser to only communicate via HTTPS. The lack of HSTS allows downgrade attacks, SSL-stripping man-in-the-middle attacks, and weakens cookie-hijacking protections.

plugin_output:
  HTTP/1.1 200 OK

  Content-Type: text/html
  Last-Modified: Thu, 03 Nov 2022 18:34:25 GMT
  Accept-Ranges: bytes
  ETag: "c3af9ae6b2efd81:0"
  Server: Microsoft-IIS/10.0
  Date: Fri, 06 Mar 2026 05:36:51 GMT
  Content-Length: 703


  The remote HTTPS server does not send the HTTP
  "Strict-Transport-Security" header.


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-VSF-004
host_ip: 164.231.187.43
protocol: tcp
svc_name: www
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : C=US/ST=Texas/L=Houston/O=Hewlett Packard Enterprise/OU=Hewlett Packard Enterprise Network Management Software (SMH)/CN=MONT-VSF-004.montford-point.navy.mil
  |-Issuer  : C=US/ST=Texas/L=Houston/O=Hewlett Packard Enterprise/OU=Hewlett Packard Enterprise Network Management Software (SMH)/CN=MONT-VSF-004.montford-point.navy.mil


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-VSF-004
host_ip: 164.231.187.43
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-VSF-004.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-VSF-004.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-VSF-004
host_ip: 164.231.187.43
protocol: tcp
svc_name: www
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : C=US/ST=Texas/L=Houston/O=Hewlett Packard Enterprise/OU=Hewlett Packard Enterprise Network Management Software (SMH)/CN=MONT-VSF-004.montford-point.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-VSF-004
host_ip: 164.231.187.43
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-VSF-004.MONTFORD-POINT.navy.mil


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-VSF-003
host_ip: 164.231.187.42
protocol: tcp
svc_name: www
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : C=US/ST=Texas/L=Houston/O=Hewlett Packard Enterprise/OU=Hewlett Packard Enterprise Network Management Software (SMH)/CN=MONT-VSF-003.MONTFORD-POINT.navy.mil
  |-Issuer  : C=US/ST=Texas/L=Houston/O=Hewlett Packard Enterprise/OU=Hewlett Packard Enterprise Network Management Software (SMH)/CN=MONT-VSF-003.MONTFORD-POINT.navy.mil


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-VSF-003
host_ip: 164.231.187.42
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-VSF-003.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-VSF-003.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-VSF-003
host_ip: 164.231.187.42
protocol: tcp
svc_name: www
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : C=US/ST=Texas/L=Houston/O=Hewlett Packard Enterprise/OU=Hewlett Packard Enterprise Network Management Software (SMH)/CN=MONT-VSF-003.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-VSF-003
host_ip: 164.231.187.42
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-VSF-003.MONTFORD-POINT.navy.mil


plugin_name: SSL Certificate with Wrong Hostname
plugin_family: General
risk_factor: Medium
hostname: 164.231.187.41
host_ip: 164.231.187.41
protocol: tcp
svc_name: www
synopsis: The SSL certificate for this service is for a different host.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The 'commonName' (CN) attribute of the SSL certificate presented for this service is for a different machine.

plugin_output:
  The identities known by Nessus are :

    164.231.187.41
    mont-nas
    164.231.187.41

  The Common Name in the certificate is :

    QNAP NAS


plugin_name: IP Forwarding Enabled
plugin_family: Firewalls
risk_factor: Medium
hostname: 164.231.187.41
host_ip: 164.231.187.41
protocol: tcp
svc_name: general
synopsis: The remote host has IP forwarding enabled.
cves: CVE-1999-0511
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The remote host has IP forwarding enabled. An attacker can exploit this to route packets through the host and potentially bypass some firewalls / routers / NAC filtering.

  Unless the remote host is a router, it is recommended that you disable IP forwarding.

solution:
  On Linux, you can disable IP forwarding by doing :

  echo 0 > /proc/sys/net/ipv4/ip_forward

  On Windows, set the key 'IPEnableRouter' to 0 under

  HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters

  On Mac OS X, you can disable IP forwarding by executing the command :

  sysctl -w net.inet.ip.forwarding=0

  For other systems, check with your vendor.

plugin_output:
  IP forwarding appears to be enabled on the remote host.

   Detected local MAC Address        : 00155dcdd503
   Response from local MAC Address   : 00155dcdd503

   Detected Gateway MAC Address      : 245ebe0ece90
   Response from Gateway MAC Address : 245ebe0ece90


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: 164.231.187.41
host_ip: 164.231.187.41
protocol: tcp
svc_name: www
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : C=TW/ST=Taipei/L=Taipei/O=QNAP Systems, Inc./OU=QTS/CN=QNAP NAS/E=support@qnap.com
  |-Issuer  : C=TW/ST=Taipei/L=Taipei/O=QNAP Systems, Inc./OU=QTS/CN=QNAP NAS/E=support@qnap.com


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: 164.231.187.41
host_ip: 164.231.187.41
protocol: tcp
svc_name: www
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : C=TW/ST=Taipei/L=Taipei/O=QNAP Systems, Inc./OU=QTS/CN=QNAP NAS/E=support@qnap.com


plugin_name: SMB Signing not required
plugin_family: Misc.
risk_factor: Medium
hostname: 164.231.187.41
host_ip: 164.231.187.41
protocol: tcp
svc_name: cifs
synopsis: Signing is not required on the remote SMB server.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  Signing is not required on the remote SMB server. An unauthenticated, remote attacker can exploit this to conduct man-in-the-middle attacks against the SMB server.

solution:
  Enforce message signing in the host's configuration. On Windows, this is found in the policy setting 'Microsoft network server: Digitally sign communications (always)'. On Samba, the setting is called 'server signing'. See the 'see also' links for further details.

see_also:
  http://www.nessus.org/u?df39b8b3
  http://technet.microsoft.com/en-us/library/cc731957.aspx
  http://www.nessus.org/u?74b80723
  https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html
  http://www.nessus.org/u?a3cac4ea


plugin_name: OpenSSH < 10.1 / 10.1p1 Multiple Vulnerabilities
plugin_family: Misc.
risk_factor: Low
hostname: 164.231.187.41
host_ip: 164.231.187.41
protocol: tcp
svc_name: ssh
synopsis: The SSH server running on the remote host is affected by multiple vulnerabilities.
solution: Upgrade to OpenSSH version 10.1/10.1p1 or later.
cves: CVE-2025-61984, CVE-2025-61985
xrefs: IAVA:2025-A-0806, IAVA:2025-A-0729-S
see_also: https://www.openssh.com/releasenotes.html#10.1p1
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  The version of OpenSSH installed on the remote host is prior to 10.1. It is, therefore, affected by multiple vulnerabilities:

    - ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly     untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted     sources are the command line and %-sequence expansion of a configuration file. (A configuration file     that provides a complete literal username is not categorized as an untrusted source.) (CVE-2025-61984)

    - ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a     ProxyCommand is used. (CVE-2025-61985)

  Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

plugin_output:
  Version source    : SSH-2.0-OpenSSH_10.0
    Installed version : 10.0
    Fixed version     : 10.1 / 10.1.p1


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-ACAS-001
host_ip: 164.231.187.40
protocol: tcp
svc_name: www
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : O=Nessus Users United/OU=Nessus Server/L=New York/C=US/ST=NY/CN=MONT-ACAS-001
  |-Issuer  : O=Nessus Users United/OU=Nessus Certification Authority/L=New York/C=US/ST=NY/CN=Nessus Certification Authority


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-ACAS-001
host_ip: 164.231.187.40
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-ACAS-001.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-ACAS-001.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-ACAS-001
host_ip: 164.231.187.40
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-ACAS-001.MONTFORD-POINT.navy.mil


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92230
host_ip: 164.231.187.71
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-WS-92230.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-WS-92230.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92230
host_ip: 164.231.187.71
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-WS-92230.MONTFORD-POINT.navy.mil


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92026
host_ip: 164.231.187.70
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-WS-92026.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-WS-92026.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92026
host_ip: 164.231.187.70
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-WS-92026.MONTFORD-POINT.navy.mil


plugin_name: Autodesk 2025 < 2025.1.2 Multiple Vulnerabilities (AutoCAD) (adsk-sa-2025-0001)
plugin_family: Windows
risk_factor: High
hostname: MONT-WS-92026
host_ip: 164.231.187.70
protocol: tcp
svc_name: cifs
solution: Upgrade to Autodesk AutoCAD versions 2025.1.2 or later.
xrefs: IAVA:2025-A-0184-S
see_also: https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0001
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
synopsis:
  The version of Autodesk AutoCAD installed on the remote Windows host is affected by multiple vulnerabilities.

description:
  The 2025 version of Autodesk AutoCAD installed on the remote Windows host is a version prior to 2025.1.2. It is, therefore, affected by multiple vulnerabilities:

    - A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an     Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash,     read sensitive data, or execute arbitrary code in the context of the current process. (CVE-2025-1427)

    - A maliciously crafted CATPART file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read     vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or     execute arbitrary code in the context of the current process. (CVE-2025-1428)

    - A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force a Memory Corruption     vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context     of the current process. (CVE-2025-1430)

  Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

plugin_output:
  Path              : C:\Program Files\Autodesk\AutoCAD LT 2025\
    Installed version : 25.0.154.0.0
    Fixed version     : 25.1.2

cves:
  CVE-2025-1427, CVE-2025-1428, CVE-2025-1429, CVE-2025-1430, CVE-2025-1432, CVE-2025-1433, CVE-2025-1649, CVE-2025-1650, CVE-2025-1651


plugin_name: Autodesk Multiple Vulnerabilities (AutoCAD) (adsk-sa-2025-0017)
plugin_family: Windows
risk_factor: High
hostname: MONT-WS-92026
host_ip: 164.231.187.70
protocol: tcp
svc_name: cifs
solution: Upgrade to Autodesk AutoCAD versions 2023.1.8, 2024.1.8, 2025.1.3, 2026.1 or later.
cves: CVE-2025-5046, CVE-2025-5047, CVE-2025-5048
xrefs: IAVA:2025-A-0617-S
see_also: https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0017
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
synopsis:
  The version of Autodesk AutoCAD installed on the remote Windows host is affected by multiple vulnerabilities.

description:
  The 2025 version of Autodesk AutoCAD installed on the remote Windows host is a version prior to 2026.1. It is, therefore, affected by multiple vulnerabilities:

    - A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds     Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive     data, or execute arbitrary code in the context of the current process. (CVE-2025-5046)

    - A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable     vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data,     or execute arbitrary code in the context of the current process. (CVE-2025-5047)

    - A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory     Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in     the context of the current process. (CVE-2025-5048)

  Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

plugin_output:
  Path              : C:\Program Files\Autodesk\AutoCAD LT 2025\
    Installed version : 25.0.154.0.0
    Fixed version     : 25.0.171.0 (2025.1.3)


plugin_name: Autodesk Installer Privilege Escalation (CVE-2025-10885)
plugin_family: Windows
risk_factor: High
hostname: MONT-WS-92026
host_ip: 164.231.187.70
protocol: tcp
svc_name: cifs
synopsis: A software component installed on the remote Windows host is affected by a privilege escalation.
solution: Upgrade to Autodesk Installer 2.19 or later.
cves: CVE-2025-10885
xrefs: IAVA:2025-A-0830
see_also: https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0022
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  This vulnerability is a privilege escalation flaw in the Autodesk Installer, where improper validation of files loaded during the installation process allows a local, low-privileged attacker to craft a malicious file that is executed with elevated permissions, ultimately enabling arbitrary code execution as NT AUTHORITY\SYSTEM and full compromise of the host system.

  Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

plugin_output:
  Path              : C:\Program Files\Autodesk\AdODIS\V1\Installer.exe
    Installed version : 2.10.0.9
    Fixed version     : 2.19


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-99181
host_ip: 164.231.187.69
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-WS-99181.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-WS-99181.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-99181
host_ip: 164.231.187.69
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-WS-99181.MONTFORD-POINT.navy.mil


plugin_name: Windows Defender Antimalware/Antivirus Signature Definition Check
plugin_family: Windows
risk_factor: High
hostname: MONT-WS-99181
host_ip: 164.231.187.69
protocol: tcp
svc_name: cifs
solution: Trigger an update manually and/or enable auto-updates.
see_also: https://www.microsoft.com/en-us/wdsi/definitions
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
synopsis:
  Windows Defender AntiMalware / AntiVirus Signatures are continuously not and should not be more than 1 day old

description:
  Windows Defender has an AntiMalware/AntiVirus signature that gets updated continuously. The signature definition has not been updated in more than 1 day.

plugin_output:
  Malware Signature Timestamp : Mar.  4, 2026 at 11:14:11 GMT
    Malware Signature Version   : 1.445.354.0


plugin_name: Tenable Nessus Agent < 10.9.3 / 11.x < 11.0.3 Privilege Escalation Vulnerability (TNS-2026-01)
plugin_family: Windows
risk_factor: High
hostname: MONT-WS-99181
host_ip: 164.231.187.69
protocol: tcp
svc_name: cifs
solution: Upgrade to Tenable Nessus Agent 10.9.3 / 11.0.3 or later.
cves: CVE-2025-36640
xrefs: IAVA:2026-A-0149
see_also:
  http://www.nessus.org/u?3bdd8712
  https://www.tenable.com/security/TNS-2026-01

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
synopsis:
  An instance of Nessus Agent installed on the remote system is affected by Privilege Escalation Vulnerability.

description:
  According to its self-reported version, the Tenable Nessus Agent running on the remote host is prior to 10.9.3 or 11.0.3. It is, therefore, affected by a Privilege Escalation Vulnerability as referenced in the TNS-2026-01 advisory.

    - A vulnerability has been identified in the installation/uninstallation of the Nessus Agent Tray App on Windows     Hosts which could lead to escalation of privileges. (CVE-2025-36640)

  Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

plugin_output:
  Path              : C:\Program Files\Tenable\Nessus Agent
    Installed version : 10.9.0
    Fixed version     : 10.9.3


plugin_name: Tenable Nessus Agent < 11.0.4 / 11.1.x < 11.1.2 DoS (TNS-2026-05)
plugin_family: Windows
risk_factor: Medium
hostname: MONT-WS-99181
host_ip: 164.231.187.69
protocol: tcp
svc_name: general
synopsis: An instance of Nessus Agent installed on the remote system is affected by a vulnerability.
solution: Upgrade to Tenable Nessus Agent 11.0.4, 11.1.2 or later.
cves: CVE-2026-2026
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
  According to its self-reported version, the Tenable Nessus Agent running on the remote host is prior to 11.0.4 or 11.1.x prior to 11.1.2.
  It is, therefore, affected by a vulnerability as referenced in the TNS-2026-05 advisory.

    - A vulnerability has been identified where weak file permissions in the Nessus Agent directory could allow     unauthorized access, potentially permitting Denial of Service (DoS) attacks. Tenable has released Nessus     Agent 11.0.4 and 11.1.2 to address these issues. The installation files can be obtained from the Tenable     Downloads Portal (https://www.tenable.com/downloads/nessus). (CVE-2026-2026)

  Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

plugin_output:
  Path              : C:\Program Files\Tenable\Nessus Agent
    Installed version : 10.9.0
    Fixed version     : 11.0.4

see_also:
  https://docs.tenable.com/release-notes/Content/agent/2026.htm
  https://www.tenable.com/security/TNS-2026-05


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92229
host_ip: 164.231.187.68
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-WS-92229.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-WS-92229.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92229
host_ip: 164.231.187.68
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-WS-92229.MONTFORD-POINT.navy.mil


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92202
host_ip: 164.231.187.67
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-WS-92202.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-WS-92202.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92202
host_ip: 164.231.187.67
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-WS-92202.MONTFORD-POINT.navy.mil


plugin_name: ICMP Timestamp Request Remote Date Disclosure
plugin_family: General
risk_factor: Low
hostname: MONT-WS-92038.MONTFORD-POINT.navy.mil
host_ip: 164.231.187.66
protocol: icmp
svc_name: general
synopsis: It is possible to determine the exact time set on the remote host.
solution: Filter out the ICMP timestamp requests (13), and the outgoing ICMP timestamp replies (14).
cves: CVE-1999-0524
xrefs: CWE:200
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 400 characters]

plugin_output:
  This host returns non-standard timestamps (high bit is set)
  The ICMP timestamps might be in little endian format (not in network format)
  The difference between the local and remote clocks is 6 seconds.


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92245
host_ip: 164.231.187.77
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-WS-92245.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-WS-92245.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92245
host_ip: 164.231.187.77
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-WS-92245.MONTFORD-POINT.navy.mil


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92032
host_ip: 164.231.187.76
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-WS-92032.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-WS-92032.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92032
host_ip: 164.231.187.76
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-WS-92032.MONTFORD-POINT.navy.mil


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92095
host_ip: 164.231.187.75
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-WS-92095.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-WS-92095.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92095
host_ip: 164.231.187.75
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-WS-92095.MONTFORD-POINT.navy.mil


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92024
host_ip: 164.231.187.74
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-WS-92024.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-WS-92024.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92024
host_ip: 164.231.187.74
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-WS-92024.MONTFORD-POINT.navy.mil


plugin_name: Microsoft Office ActiveX Controls Enabled Without Restrictions Or Prompting
plugin_family: Windows
risk_factor: Medium
hostname: MONT-WS-92024
host_ip: 164.231.187.74
protocol: tcp
svc_name: general
solution: Disable ActiveX controls or enable them with prompt and with additional restrictions.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
synopsis:
  A Microsoft Office application installed on the remote host has ActiveX controls enabled without restrictions and without prompting.

description:
  A Microsoft Office application installed on the remote host has ActiveX controls enabled without restrictions and without prompting.

plugin_output:
  SID: S-1-5-21-1360995287-4027491577-3040029667-1244
  Username: MONTFORD-POINT.NAVY.MIL\Joseph.R.Lo-Guidice
  The Microsoft Office installed on this machine for this user has ActiveX Controls enabled without restrictions and without prompting.


plugin_name: Microsoft Office Protected View Disabled
plugin_family: Windows
risk_factor: Medium
hostname: MONT-WS-92024
host_ip: 164.231.187.74
protocol: tcp
svc_name: general
synopsis: A Microsoft Office application installed on the remote host has protected view disabled.
description: A Microsoft Office application installed on the remote host has protected view disabled.
solution: Enable protected view settings.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
plugin_output:
  SID              : S-1-5-21-1360995287-4027491577-3040029667-1244
  Username         : MONTFORD-POINT.NAVY.MIL\Joseph.R.Lo-Guidice
  Registry Key     : HKU\S-1-5-21-1360995287-4027491577-3040029667-1244\Software\Microsoft\Office\16.0\Excel\Security\ProtectedView\DisableInternetFilesInPV = 1
  This application : Excel in Microsoft Office 2016/2019 has protected view from files originating from the internet disabled.
  Registry Key     : HKU\S-1-5-21-1360995287-4027491577-3040029667-1244\Software\Microsoft\Office\16.0\Excel\Security\ProtectedView\DisableUnsafeLocationsInPV = 1
  This application : Excel in Microsoft Office 2016/2019 has protected view from files located from potentially unsafe locations disabled.


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92034
host_ip: 164.231.187.73
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-WS-92034.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-WS-92034.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92034
host_ip: 164.231.187.73
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-WS-92034.MONTFORD-POINT.navy.mil


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92040
host_ip: 164.231.187.72
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : CN=MONT-WS-92040.MONTFORD-POINT.navy.mil
  |-Issuer  : CN=MONT-WS-92040.MONTFORD-POINT.navy.mil


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-WS-92040
host_ip: 164.231.187.72
protocol: tcp
svc_name: msrdp
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-03-06 17:48:07
updated_at: 2026-03-06 17:48:07
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : CN=MONT-WS-92040.MONTFORD-POINT.navy.mil


plugin_name: Security Update for Microsoft .NET Core (March 2026)
plugin_family: Windows
risk_factor: Medium
hostname: MONT-WS-92245.MONTFORD-POINT.navy.mil
host_ip: 164.231.187.77
protocol: tcp
svc_name: cifs
synopsis: The remote Windows host is affected by multiple vulnerabilities.
solution: Update .NET Core, remove vulnerable packages and refer to vendor advisory.
cves: CVE-2026-26127, CVE-2026-26130, CVE-2026-26131
workflow_status: Open
created_at: 2026-04-02 15:36:46
updated_at: 2026-04-02 15:36:46
credentialed: Yes
description:
  The version of tested product installed on the remote host is 8.x prior to 8.0.25, 9.x prior to 9.0.14, or 10.x prior to 10.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory:

    - Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network. (CVE-2026-26127)

    - Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to     deny service over a network. (CVE-2026-26130)

    - Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally.
      (CVE-2026-26131)

  Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

plugin_output:
  Path              : C:\Program Files\dotnet\shared\Microsoft.NetCore.App\8.0.24\
    Installed version : 8.0.24.35722
    Fixed version     : 8.0.25
    CVE(s)            : CVE-2026-26130

xrefs:
  MSKB:5081277, MSKB:5081278, MSKB:5081276, MSFT:MS26-5081278, MSFT:MS26-5081277, MSFT:MS26-5081276, IAVA:2026-A-0224

see_also:
  https://github.com/dotnet/announcements/issues/387
  http://www.nessus.org/u?6e7ec7fb
  https://dotnet.microsoft.com/en-us/download/dotnet/8.0
  https://support.microsoft.com/help/5081277
  http://www.nessus.org/u?4c9d9431
  https://dotnet.microsoft.com/download/dotnet/9.0
  https://support.microsoft.com/help/5081278
  http://www.nessus.org/u?3f009cbb
  https://dotnet.microsoft.com/download/dotnet/10.0
  https://support.microsoft.com/help/5081276


plugin_name: ICMP Timestamp Request Remote Date Disclosure
plugin_family: General
risk_factor: Low
hostname: MONT-WS-92034.MONTFORD-POINT.navy.mil
host_ip: 164.231.187.73
protocol: icmp
svc_name: general
synopsis: It is possible to determine the exact time set on the remote host.
solution: Filter out the ICMP timestamp requests (13), and the outgoing ICMP timestamp replies (14).
cves: CVE-1999-0524
xrefs: CWE:200
workflow_status: Open
created_at: 2026-04-02 15:36:46
updated_at: 2026-04-02 15:36:46
credentialed: No
description:
[cell repeats an earlier one in this file: 400 characters]

plugin_output:
  This host returns non-standard timestamps (high bit is set)
  The ICMP timestamps might be in little endian format (not in network format)
  The difference between the local and remote clocks is 1 second.


plugin_name: SSL Certificate Expiry
plugin_family: General
risk_factor: Medium
hostname: 164.231.187.41
host_ip: 164.231.187.41
protocol: tcp
svc_name: commplex-link?
synopsis: The remote server's SSL certificate has already expired.
solution: Purchase or generate a new SSL certificate to replace the existing one.
workflow_status: Open
created_at: 2026-04-02 15:36:46
updated_at: 2026-04-02 15:36:46
credentialed: Yes
description:
  This plugin checks expiry dates of certificates associated with SSL- enabled services on the target and reports whether any have already expired.

plugin_output:
  The SSL certificate has already expired :

    Subject          : C=TW, ST=Taipei, L=Taipei, O=QNAP Systems, Inc., OU=QTS, CN=QNAP NAS, emailAddress=support@qnap.com
    Issuer           : C=TW, ST=Taipei, L=Taipei, O=QNAP Systems, Inc., OU=QTS, CN=QNAP NAS, emailAddress=support@qnap.com
    Not valid before : Mar 11 10:45:27 2016 GMT
    Not valid after  : Mar  9 10:45:27 2026 GMT


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: 164.231.187.41
host_ip: 164.231.187.41
protocol: tcp
svc_name: commplex-link?
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-04-02 15:36:46
updated_at: 2026-04-02 15:36:46
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was part of the certificate chain
  sent by the remote host, but it has expired :

  |-Subject   : C=TW/ST=Taipei/L=Taipei/O=QNAP Systems, Inc./OU=QTS/CN=QNAP NAS/E=support@qnap.com
  |-Not After : Mar 09 10:45:27 2026 GMT

  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : C=TW/ST=Taipei/L=Taipei/O=QNAP Systems, Inc./OU=QTS/CN=QNAP NAS/E=support@qnap.com
  |-Issuer  : C=TW/ST=Taipei/L=Taipei/O=QNAP Systems, Inc./OU=QTS/CN=QNAP NAS/E=support@qnap.com


plugin_name: SSL Self-Signed Certificate
plugin_family: General
risk_factor: Medium
hostname: MONT-BE-002
host_ip: 164.231.187.37
protocol: tcp
svc_name: beserver-msg-q?
synopsis: The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-04-02 15:36:46
updated_at: 2026-04-02 15:36:46
credentialed: Yes
description:
[cell repeats an earlier one in this file: 426 characters]

plugin_output:
  The following certificate was found at the top of the certificate
  chain sent by the remote host, but is self-signed and was not
  found in the list of known certificate authorities :

  |-Subject : C=US/ST=Florida/L=Heathrow/O=Veritas Technologies LLC/OU=BE-HRO/CN=MONT-BE-002 - ROOT


plugin_name: SSL Certificate Cannot Be Trusted
plugin_family: General
risk_factor: Medium
hostname: MONT-BE-002
host_ip: 164.231.187.37
protocol: tcp
svc_name: beserver-msg-q?
synopsis: The SSL certificate for this service cannot be trusted.
solution: Purchase or generate a proper SSL certificate for this service.
see_also:
  https://www.itu.int/rec/T-REC-X.509/en
  https://en.wikipedia.org/wiki/X.509

workflow_status: Open
created_at: 2026-04-02 15:36:46
updated_at: 2026-04-02 15:36:46
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1512 characters]

plugin_output:
  The following certificate was at the top of the certificate
  chain sent by the remote host, but it is signed by an unknown
  certificate authority :

  |-Subject : C=US/ST=Florida/L=Heathrow/O=Veritas Technologies LLC/OU=BE-HRO/CN=MONT-BE-002 - ROOT
  |-Issuer  : C=US/ST=Florida/L=Heathrow/O=Veritas Technologies LLC/OU=BE-HRO/CN=MONT-BE-002 - ROOT


plugin_name: SSL Certificate with Wrong Hostname
plugin_family: General
risk_factor: Medium
hostname: MONT-BE-002
host_ip: 164.231.187.37
protocol: tcp
svc_name: beserver-msg-q?
synopsis: The SSL certificate for this service is for a different host.
solution: Purchase or generate a proper SSL certificate for this service.
workflow_status: Open
created_at: 2026-04-02 15:36:46
updated_at: 2026-04-02 15:36:46
credentialed: Yes
description:
[cell repeats an earlier one in this file: 109 characters]

plugin_output:
  The identities known by Nessus are :

    164.231.187.37
    mont-be-002
    MONT-BE-002.MONTFORD-POINT.navy.mil

  The Common Name in the certificate is :

    MONT-BE-002 - SERVER


plugin_name: Security Updates for Microsoft SQL Server (March 2026)
plugin_family: Windows : Microsoft Bulletins
risk_factor: High
hostname: MONT-BE-002
host_ip: 164.231.187.37
protocol: tcp
svc_name: cifs
synopsis: The Microsoft SQL Server installation on the remote host is missing a security update.
solution: Microsoft has released security updates for Microsoft SQL Server.
cves: CVE-2026-21262, CVE-2026-26115, CVE-2026-26116
workflow_status: Open
created_at: 2026-04-02 15:36:46
updated_at: 2026-04-02 15:36:46
credentialed: Yes
description:
  The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities:

    - A privilege escalation vulnerability     (CVE-2026-21262, CVE-2026-26115, CVE-2026-26116)

  Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

plugin_output:
  KB : 5077471
    - C:\Program Files\Microsoft SQL Server\MSSQL14.BKUPEXEC64\MSSQL\Binn\sqlservr.exe has not been patched.
      Remote version : 2017.140.3515.1
      Should be      : 2017.140.3520.4

    SQL Server Version   : 14.0.3515.1 Express Edition
    SQL Server Instance  : BKUPEXEC64

xrefs:
  MSKB:5077464, MSKB:5077465, MSKB:5077465, MSKB:5077466, MSKB:5077468, MSKB:5077469, MSKB:5077470, MSKB:5077471, MSKB:5077472, MSKB:5077473, MSKB:5077474, MSFT:MS26-5077464, MSFT:MS26-5077465, MSFT:MS26-5077465, MSFT:MS26-5077466, MSFT:MS26-5077468, MSFT:MS26-5077469, MSFT:MS26-5077470, MSFT:MS26-5077471, MSFT:MS26-5077472, MSFT:MS26-5077473, MSFT:MS26-5077474, IAVA:2026-A-0231

see_also:
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21262
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26115
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26116


plugin_name: HSTS Missing From HTTPS Server (RFC 6797)
plugin_family: Web Servers
risk_factor: Medium
hostname: MONT-MB-002
host_ip: 164.231.187.36
protocol: tcp
svc_name: www
synopsis: The remote web server is not enforcing HSTS, as defined by RFC 6797.
solution: Configure the remote web server to use HSTS.
see_also: https://tools.ietf.org/html/rfc6797
workflow_status: Open
created_at: 2026-04-02 15:36:46
updated_at: 2026-04-02 15:36:46
credentialed: Yes
description:
[cell repeats an earlier one in this file: 322 characters]

plugin_output:
  HTTP/1.1 302 Moved Temporarily

  Cache-Control: no-cache
  Pragma: no-cache
  Location: https://mont-mb-002.montford-point.navy.mil/owa/
  Server: Microsoft-IIS/10.0
  X-FEServer: MONT-MB-002
  X-RequestId: ca4692db-4501-4d63-9878-00c9977391fe
  Date: Wed, 01 Apr 2026 21:01:48 GMT
  Connection: close
  Content-Length: 0


  The remote HTTPS server does not send the HTTP
  "Strict-Transport-Security" header.


plugin_name: HSTS Missing From HTTPS Server (RFC 6797)
plugin_family: Web Servers
risk_factor: Medium
hostname: MONT-MB-002
host_ip: 164.231.187.36
protocol: tcp
svc_name: www
synopsis: The remote web server is not enforcing HSTS, as defined by RFC 6797.
solution: Configure the remote web server to use HSTS.
see_also: https://tools.ietf.org/html/rfc6797
workflow_status: Open
created_at: 2026-04-02 15:36:46
updated_at: 2026-04-02 15:36:46
credentialed: Yes
description:
[cell repeats an earlier one in this file: 322 characters]

plugin_output:
  HTTP/1.1 500 Internal Server Error

  Cache-Control: private
  Content-Type: text/html; charset=utf-8
  Server: Microsoft-IIS/10.0
  X-AspNet-Version: 4.0.30319
  X-Powered-By: ASP.NET
  Date: Wed, 01 Apr 2026 21:01:50 GMT
  Content-Length: 3490


  The remote HTTPS server does not send the HTTP
  "Strict-Transport-Security" header.


plugin_name: Security Updates for Microsoft Exchange Server (February 2026)
plugin_family: Windows : Microsoft Bulletins
risk_factor: Medium
hostname: MONT-MB-002
host_ip: 164.231.187.36
protocol: tcp
svc_name: cifs
synopsis: The Microsoft Exchange Server installed on the remote host is affected by a vulnerability.
cves: CVE-2026-21527
workflow_status: Open
created_at: 2026-04-02 15:36:46
updated_at: 2026-04-02 15:36:46
credentialed: Yes
description:
  The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability as referenced in the February, 2026 security bulletin.

    - User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an     unauthorized attacker to perform spoofing over a network. (CVE-2026-21527)

  Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

solution:
  Microsoft has released the following security updates to address this issue:
    -KB5074993
    -KB5074994
    -KB5074995
    -KB5074992

plugin_output:
  Path              : E:\ExchangeV15\
    Installed version : 15.1.2507.61
    Fixed version     : 15.1.2507.66

xrefs:
  MSFT:MS26-5074993, MSFT:MS26-5074994, MSFT:MS26-5074995, MSFT:MS26-5074992, MSKB:5074993, MSKB:5074994, MSKB:5074995, MSKB:5074992, IAVA:2026-A-0127

see_also:
  https://support.microsoft.com/help/5074993
  https://support.microsoft.com/help/5074994
  https://support.microsoft.com/help/5074995
  https://support.microsoft.com/help/5074992


plugin_name: Security Updates for Microsoft Exchange Server (December 2025)
plugin_family: Windows : Microsoft Bulletins
risk_factor: High
hostname: MONT-MB-002
host_ip: 164.231.187.36
protocol: tcp
svc_name: cifs
synopsis: The Microsoft Exchange Server installed on the remote host is affected by multiple vulnerabilities.
cves: CVE-2025-64666, CVE-2025-64667
see_also:
  http://www.nessus.org/u?8d7cfad1
  http://www.nessus.org/u?0240eb20
  http://www.nessus.org/u?0d6169eb

workflow_status: Open
created_at: 2026-04-02 15:36:46
updated_at: 2026-04-02 15:36:46
credentialed: Yes
description:
  The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the December, 2025 security bulletin.

    - Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges     over a network. (CVE-2025-64666)

    - User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an     unauthorized attacker to perform spoofing over a network. (CVE-2025-64667)

  Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

solution:
  Microsoft has released the following security updates to address this issue:
    -KB5071873
    -KB5071874
    -KB5071875
    -KB5071876

plugin_output:
  Path              : E:\ExchangeV15\
    Installed version : 15.1.2507.61
    Fixed version     : 15.1.2507.63

xrefs:
  MSFT:MS25-5071873, MSFT:MS25-5071874, MSFT:MS25-5071875, MSFT:MS25-5071876, MSKB:5071873, MSKB:5071874, MSKB:5071875, MSKB:5071876, IAVA:2025-A-0913


plugin_name: DNS Server Recursive Query Cache Poisoning Weakness
plugin_family: DNS
risk_factor: Medium
hostname: MONT-DC-004
host_ip: 164.231.187.35
protocol: udp
svc_name: dns
synopsis: The remote name server allows recursive queries to be performed by the host running nessusd.
cves: CVE-1999-0024
xrefs: CERT-CC:CA-1997-22
see_also: http://www.nessus.org/u?c4dcf24a
workflow_status: Open
created_at: 2026-04-02 15:36:46
updated_at: 2026-04-02 15:36:46
credentialed: Yes
description:
  It is possible to query the remote name server for third-party names.

  If this is your internal nameserver, then the attack vector may be limited to employees or guest access if allowed.

  If you are probing a remote nameserver, then it allows anyone to use it to resolve third party names (such as www.nessus.org).
  This allows attackers to perform cache poisoning attacks against this nameserver.

  If the host allows these recursive queries via UDP, then the host can be used to 'bounce' Denial of Service attacks against another network or system.

solution:
  Restrict recursive queries to the hosts that should use this nameserver (such as those of the LAN connected to it).

  If you are using bind 8, you can do this by using the instruction 'allow-recursion' in the 'options' section of your named.conf.

  If you are using bind 9, you can define a grouping of internal addresses using the 'acl' command.

  Then, within the options block, you can explicitly state:
  'allow-recursion { hosts_defined_in_acl }'

  If you are using another name server, consult its documentation.


plugin_name: Network Time Protocol (NTP) Mode 6 Scanner
plugin_family: Misc.
risk_factor: Medium
hostname: 164.231.187.33
host_ip: 164.231.187.33
protocol: udp
svc_name: ntp
synopsis: The remote NTP server responds to mode 6 queries.
solution: Restrict NTP mode 6 queries.
see_also:
  https://www.nessus.org/u?18e62de1
  https://www.virtuesecurity.com/kb/ntp-mode-6-vulnerabilities/

workflow_status: Open
created_at: 2026-04-02 15:36:46
updated_at: 2026-04-02 15:36:46
credentialed: No
description:
[cell repeats an earlier one in this file: 303 characters]

plugin_output:
  Nessus elicited the following response from the remote
    host by sending an NTP mode 6 query :

  'version="4", processor="unknown", system="UNIX", leap=0, stratum=4,
  precision=-19, rootdelay=, rootdisp=, refid=164.231.69.13,
  reftime=0xED78015F.4C35E6D4, clock=0xED7804FF.CE48D587, peer=50512,
  tc=10, mintc=3, offset=, frequency=, sys_jitter=, clk_jitter=,
  clk_wander='


plugin_name: Network Time Protocol (NTP) Mode 6 Scanner
plugin_family: Misc.
risk_factor: Medium
hostname: 164.231.187.2
host_ip: 164.231.187.2
protocol: udp
svc_name: ntp
synopsis: The remote NTP server responds to mode 6 queries.
solution: Restrict NTP mode 6 queries.
see_also:
  https://www.nessus.org/u?18e62de1
  https://www.virtuesecurity.com/kb/ntp-mode-6-vulnerabilities/

workflow_status: Open
created_at: 2026-04-02 15:36:46
updated_at: 2026-04-02 15:36:46
credentialed: No
description:
[cell repeats an earlier one in this file: 303 characters]

plugin_output:
  Nessus elicited the following response from the remote
    host by sending an NTP mode 6 query :

  'version="4", processor="unknown", system="UNIX", leap=0, stratum=4,
  precision=-19, rootdelay=, rootdisp=, refid=164.231.69.13,
  reftime=0xED78015F.4C35E6D4, clock=0xED780532.6A0EC68F, peer=50512,
  tc=10, mintc=3, offset=, frequency=, sys_jitter=, clk_jitter=,
  clk_wander='


plugin_name: Network Time Protocol (NTP) Mode 6 Scanner
plugin_family: Misc.
risk_factor: Medium
hostname: 164.231.187.1
host_ip: 164.231.187.1
protocol: udp
svc_name: ntp
synopsis: The remote NTP server responds to mode 6 queries.
solution: Restrict NTP mode 6 queries.
see_also:
  https://www.nessus.org/u?18e62de1
  https://www.virtuesecurity.com/kb/ntp-mode-6-vulnerabilities/

workflow_status: Open
created_at: 2026-04-02 15:36:46
updated_at: 2026-04-02 15:36:46
credentialed: No
description:
[cell repeats an earlier one in this file: 303 characters]

plugin_output:
  Nessus elicited the following response from the remote
    host by sending an NTP mode 6 query :

  'version="4", processor="unknown", system="UNIX", leap=0, stratum=4,
  precision=-10, rootdelay=1126.054, rootdisp=62.780, refid=164.231.69.13,
  reftime=0xED77FDD5.ABC6A9C8, clock=0xED780548.14BC6AB8, peer=48652,
  tc=10, mintc=3, offset=4.999, frequency=-57.252, sys_jitter=8.438,
  clk_jitter=25.227, clk_wander=0.008'


plugin_name: Network Time Protocol (NTP) Mode 6 Scanner
plugin_family: Misc.
risk_factor: Medium
hostname: 164.231.187.2
host_ip: 164.231.187.2
protocol: udp
svc_name: ntp
synopsis: The remote NTP server responds to mode 6 queries.
solution: Restrict NTP mode 6 queries.
see_also:
  https://www.nessus.org/u?18e62de1
  https://www.virtuesecurity.com/kb/ntp-mode-6-vulnerabilities/

workflow_status: Open
created_at: 2026-04-02 16:52:04
updated_at: 2026-04-02 16:52:04
credentialed: No
description:
[cell repeats an earlier one in this file: 303 characters]

plugin_output:
  Nessus elicited the following response from the remote
    host by sending an NTP mode 6 query :

  'version="4", processor="unknown", system="UNIX", leap=0, stratum=4,
  precision=-19, rootdelay=, rootdisp=, refid=164.231.69.13,
  reftime=0xED787947.26D56170, clock=0xED787C8D.4B4BEEE0, peer=50512,
  tc=10, mintc=3, offset=, frequency=, sys_jitter=, clk_jitter=,
  clk_wander='


plugin_name: Network Time Protocol (NTP) Mode 6 Scanner
plugin_family: Misc.
risk_factor: Medium
hostname: 164.231.187.1
host_ip: 164.231.187.1
protocol: udp
svc_name: ntp
synopsis: The remote NTP server responds to mode 6 queries.
solution: Restrict NTP mode 6 queries.
see_also:
  https://www.nessus.org/u?18e62de1
  https://www.virtuesecurity.com/kb/ntp-mode-6-vulnerabilities/

workflow_status: Open
created_at: 2026-04-02 16:52:04
updated_at: 2026-04-02 16:52:04
credentialed: No
description:
[cell repeats an earlier one in this file: 303 characters]

plugin_output:
  Nessus elicited the following response from the remote
    host by sending an NTP mode 6 query :

  'version="4", processor="unknown", system="UNIX", leap=0, stratum=4,
  precision=-10, rootdelay=1134.001, rootdisp=66.626, refid=164.231.69.13,
  reftime=0xED787510.ABC6A9C8, clock=0xED7878BF.9BE76E38, peer=48652,
  tc=10, mintc=3, offset=3.499, frequency=-57.253, sys_jitter=23.935,
  clk_jitter=8.786, clk_wander=0.002'


plugin_name: HSTS Missing From HTTPS Server (RFC 6797)
plugin_family: Web Servers
risk_factor: Medium
hostname: MONT-DP-001
host_ip: 164.231.187.44
protocol: tcp
svc_name: www
synopsis: The remote web server is not enforcing HSTS, as defined by RFC 6797.
solution: Configure the remote web server to use HSTS.
see_also: https://tools.ietf.org/html/rfc6797
workflow_status: Open
created_at: 2026-04-02 16:52:04
updated_at: 2026-04-02 16:52:04
credentialed: Yes
description:
[cell repeats an earlier one in this file: 322 characters]

plugin_output:
  HTTP/1.1 200 OK

  Content-Type: text/html
  Last-Modified: Thu, 03 Nov 2022 18:34:25 GMT
  Accept-Ranges: bytes
  ETag: "c3af9ae6b2efd81:0"
  Server: Microsoft-IIS/10.0
  Date: Thu, 02 Apr 2026 05:06:46 GMT
  Content-Length: 703


  The remote HTTPS server does not send the HTTP
  "Strict-Transport-Security" header.


plugin_name: ICMP Timestamp Request Remote Date Disclosure
plugin_family: General
risk_factor: Low
hostname: MONT-VSF-004
host_ip: 164.231.187.43
protocol: icmp
svc_name: general
synopsis: It is possible to determine the exact time set on the remote host.
solution: Filter out the ICMP timestamp requests (13), and the outgoing ICMP timestamp replies (14).
cves: CVE-1999-0524
xrefs: CWE:200
workflow_status: Open
created_at: 2026-04-02 16:52:04
updated_at: 2026-04-02 16:52:04
credentialed: Yes
description:
[cell repeats an earlier one in this file: 400 characters]

plugin_output:
  The ICMP timestamps seem to be in little endian format (not in network format)
  The difference between the local and remote clocks is 1 second.


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\SAMM Installers\Tomcat Applications\webapps\tasktracker\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\SAMM Installers\Tomcat Applications\webapps\transalt\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\SAMM Installers\Tomcat Applications\webapps\VTL\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\SAMM Installers\Tomcat Applications\webapps\cmplanning\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\SAMM Installers\Tomcat Applications\webapps\machineryhistory\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\SAMM Installers\Tomcat Applications\webapps\peng\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\SAMM Installers\Tomcat Applications\webapps\samm\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\SAMM Installers\Tomcat Applications\webapps\sammweb\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\TOMCAT APPLICATIONS\webapps\VTL\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\TOMCAT APPLICATIONS\webapps\machineryhistory\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\TOMCAT APPLICATIONS\webapps\cmplanning\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\TOMCAT APPLICATIONS\webapps\peng\WEB-INF\lib\log4j-core-2.20.0.jar
    Installed version : 2.20.0
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\TOMCAT APPLICATIONS\webapps\sammweb\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\TOMCAT APPLICATIONS\webapps\samm\WEB-INF\lib\log4j-core-2.17.2.jar
    Installed version : 2.17.2
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\TOMCAT APPLICATIONS\webapps\tasktracker\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\TOMCAT APPLICATIONS\webapps\transalt\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\TOMCAT APPLICATIONS\Backup\webapps-20250319143603\tasktracker\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\TOMCAT APPLICATIONS\Backup\webapps-20250319143603\transalt\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\TOMCAT APPLICATIONS\Backup\webapps-20250319143603\VTL\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\TOMCAT APPLICATIONS\Backup\webapps-20250319143603\cmplanning\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\TOMCAT APPLICATIONS\Backup\webapps-20250319143603\machineryhistory\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\TOMCAT APPLICATIONS\Backup\webapps-20250319143603\peng\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\TOMCAT APPLICATIONS\Backup\webapps-20250319143603\samm\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\TOMCAT APPLICATIONS\Backup\webapps-20250319143603\sammweb\WEB-INF\lib\log4j-core-2.17.1.jar
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\Vol1\SAMM temp staging\3.5.13.1 Installers\Web Application Updates\SAMM WAR Files\VTL.war
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\Vol1\SAMM temp staging\3.5.13.1 Installers\Web Application Updates\SAMM WAR Files\machineryhistory.war
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\Vol1\SAMM temp staging\3.5.13.1 Installers\Web Application Updates\SAMM WAR Files\cmplanning.war
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\Vol1\SAMM temp staging\3.5.13.1 Installers\Web Application Updates\SAMM WAR Files\peng.war
    Installed version : 2.20.0
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\Vol1\SAMM temp staging\3.5.13.1 Installers\Web Application Updates\SAMM WAR Files\samm.war
    Installed version : 2.17.2
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\Vol1\SAMM temp staging\3.5.13.1 Installers\Web Application Updates\SAMM WAR Files\sammweb.war
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\Vol1\SAMM temp staging\3.5.13.1 Installers\Web Application Updates\SAMM WAR Files\tasktracker.war
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Apache Log4j 2.0-beta9 < 2.25.3 MitM
plugin_family: Misc.
risk_factor: Medium
hostname: MONT-AP-002
host_ip: 164.231.187.39
protocol: tcp
svc_name: general
synopsis: A logging library installed on the remote host is affected by a man in the middle vulnerability.
solution: Upgrade to Apache Log4j version 2.25.3 or later.
cves: CVE-2025-68161
xrefs: IAVA:2026-A-0001
see_also: https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
[cell repeats an earlier one in this file: 1113 characters]

plugin_output:
  Path              : E:\Vol1\SAMM temp staging\3.5.13.1 Installers\Web Application Updates\SAMM WAR Files\transalt.war
    Installed version : 2.17.1
    Fixed version     : 2.25.3


plugin_name: Network Time Protocol (NTP) Mode 6 Scanner
plugin_family: Misc.
risk_factor: Medium
hostname: 164.231.187.33
host_ip: 164.231.187.33
protocol: udp
svc_name: ntp
synopsis: The remote NTP server responds to mode 6 queries.
solution: Restrict NTP mode 6 queries.
see_also:
  https://www.nessus.org/u?18e62de1
  https://www.virtuesecurity.com/kb/ntp-mode-6-vulnerabilities/

workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: No
description:
[cell repeats an earlier one in this file: 303 characters]

plugin_output:
  Nessus elicited the following response from the remote
    host by sending an NTP mode 6 query :

  'version="4", processor="unknown", system="UNIX", leap=0, stratum=4,
  precision=-19, rootdelay=, rootdisp=, refid=164.231.69.13,
  reftime=0xED787947.26D56170, clock=0xED787973.9C603376, peer=50512,
  tc=10, mintc=3, offset=, frequency=, sys_jitter=, clk_jitter=,
  clk_wander='


plugin_name: Security Update for Microsoft .NET Core (March 2026)
plugin_family: Windows
risk_factor: Medium
hostname: MONT-WS-92026.MONTFORD-POINT.navy.mil
host_ip: 164.231.187.70
protocol: tcp
svc_name: cifs
synopsis: The remote Windows host is affected by multiple vulnerabilities.
solution: Update .NET Core, remove vulnerable packages and refer to vendor advisory.
cves: CVE-2026-26127, CVE-2026-26130, CVE-2026-26131
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
  The version of tested product installed on the remote host is 8.x prior to 8.0.25, 9.x prior to 9.0.14, or 10.x prior to 10.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory:

    - Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network. (CVE-2026-26127)

    - Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to     deny service over a network. (CVE-2026-26130)

    - Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally.
      (CVE-2026-26131)

  Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

plugin_output:
  Path              : C:\Program Files\dotnet\shared\Microsoft.NetCore.App\8.0.24\
    Installed version : 8.0.24.35720
    Fixed version     : 8.0.25
    CVE(s)            : CVE-2026-26130

xrefs:
  MSKB:5081277, MSKB:5081278, MSKB:5081276, MSFT:MS26-5081278, MSFT:MS26-5081277, MSFT:MS26-5081276, IAVA:2026-A-0224

see_also:
  https://github.com/dotnet/announcements/issues/387
  http://www.nessus.org/u?6e7ec7fb
  https://dotnet.microsoft.com/en-us/download/dotnet/8.0
  https://support.microsoft.com/help/5081277
  http://www.nessus.org/u?4c9d9431
  https://dotnet.microsoft.com/download/dotnet/9.0
  https://support.microsoft.com/help/5081278
  http://www.nessus.org/u?3f009cbb
  https://dotnet.microsoft.com/download/dotnet/10.0
  https://support.microsoft.com/help/5081276


plugin_name: Windows Defender Antimalware/Antivirus Signature Definition Check
plugin_family: Windows
risk_factor: High
hostname: MONT-WS-99181
host_ip: 164.231.187.69
protocol: tcp
svc_name: cifs
solution: Trigger an update manually and/or enable auto-updates.
see_also: https://www.microsoft.com/en-us/wdsi/definitions
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
synopsis:
  Windows Defender AntiMalware / AntiVirus Signatures are continuously not and should not be more than 1 day old

description:
  Windows Defender has an AntiMalware/AntiVirus signature that gets updated continuously. The signature definition has not been updated in more than 1 day.

plugin_output:
  Malware Signature Timestamp : Mar. 31, 2026 at 06:06:18 GMT
    Malware Signature Version   : 1.447.105.0


plugin_name: Microsoft Edge (Chromium) < 145.0.3800.82 Multiple Vulnerabilities
plugin_family: Windows
risk_factor: Critical
hostname: MONT-WS-92245
host_ip: 164.231.187.77
protocol: tcp
svc_name: cifs
synopsis: The remote host has an web browser installed that is affected by multiple vulnerabilities.
solution: Upgrade to Microsoft Edge version 145.0.3800.82 or later.
cves: CVE-2026-3061, CVE-2026-3062, CVE-2026-3063
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
  The version of Microsoft Edge installed on the remote Windows host is prior to 145.0.3800.82. It is, therefore, affected by multiple vulnerabilities as referenced in the February 26, 2026 advisory.

    - Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote     attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity:
      High) (CVE-2026-3062)

    - Out of bounds read in Media in Google Chrome prior to 145.0.7632.116 allowed a remote attacker to perform     an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) (CVE-2026-3061)

    - Inappropriate implementation in DevTools in Google Chrome prior to 145.0.7632.116 allowed an attacker who     convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via     DevTools. (Chromium security severity: High) (CVE-2026-3063)

  Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

plugin_output:
  Path              : C:\Program Files (x86)\Microsoft\Edge\Application
    Installed version : 144.0.3719.115
    Fixed version     : 145.0.3800.82

see_also:
  http://www.nessus.org/u?110469f3
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3061
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3062
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3063


plugin_name: Microsoft Edge (Chromium) < 145.0.3800.97 Multiple Vulnerabilities
plugin_family: Windows
risk_factor: Critical
hostname: MONT-WS-92245
host_ip: 164.231.187.77
protocol: tcp
svc_name: cifs
synopsis: The remote host has an web browser installed that is affected by multiple vulnerabilities.
solution: Upgrade to Microsoft Edge version 145.0.3800.97 or later.
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
  The version of Microsoft Edge installed on the remote Windows host is prior to 145.0.3800.97. It is, therefore, affected by multiple vulnerabilities as referenced in the March 6, 2026 advisory.

    - Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially     perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-3538)

    - Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to     potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity:
      Critical) (CVE-2026-3536)

    - Object lifecycle issue in DevTools in Google Chrome prior to 145.0.7632.159 allowed an attacker who     convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted     Chrome Extension. (Chromium security severity: High) (CVE-2026-3539)

    - Inappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.159 allowed a remote     attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity:
      High) (CVE-2026-3540)

    - Inappropriate implementation in CSS in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to     perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-3541)

  Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

plugin_output:
  Path              : C:\Program Files (x86)\Microsoft\Edge\Application
    Installed version : 144.0.3719.115
    Fixed version     : 145.0.3800.97

cves:
  CVE-2026-3536, CVE-2026-3538, CVE-2026-3539, CVE-2026-3540, CVE-2026-3541, CVE-2026-3542, CVE-2026-3543, CVE-2026-3544, CVE-2026-3545

see_also:
  http://www.nessus.org/u?d3eb85ac
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3536
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3538
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3539
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3540
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3541
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3542
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3543
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3544
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3545


plugin_name: Microsoft Edge (Chromium) < 146.0.3856.59 Multiple Vulnerabilities
plugin_family: Windows
risk_factor: Critical
hostname: MONT-WS-92245
host_ip: 164.231.187.77
protocol: tcp
svc_name: cifs
synopsis: The remote host has an web browser installed that is affected by multiple vulnerabilities.
solution: Upgrade to Microsoft Edge version 146.0.3856.59 or later.
xrefs: CISA-KNOWN-EXPLOITED:2026/03/27, IAVA:2026-A-0246
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
  The version of Microsoft Edge installed on the remote Windows host is prior to 146.0.3856.59. It is, therefore, affected by multiple vulnerabilities as referenced in the March 13, 2026 advisory.

    - Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to     execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-3910)

    - Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-3913)

    - Integer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2026-3914)

    - Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform     an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) (CVE-2026-3915)

    - Out of bounds read in Web Speech in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-3916)

  Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

plugin_output:
  Path              : C:\Program Files (x86)\Microsoft\Edge\Application
    Installed version : 144.0.3719.115
    Fixed version     : 146.0.3856.59

cves:
  CVE-2026-3910, CVE-2026-3913, CVE-2026-3914, CVE-2026-3915, CVE-2026-3916, CVE-2026-3917, CVE-2026-3918, CVE-2026-3919, CVE-2026-3920, CVE-2026-3921, CVE-2026-3922, CVE-2026-3923, CVE-2026-3924, CVE-2026-3925, CVE-2026-3926, CVE-2026-3927, CVE-2026-3928, CVE-2026-3929, CVE-2026-3930, CVE-2026-3931, CVE-2026-3932, CVE-2026-3934, CVE-2026-3935, CVE-2026-3936, CVE-2026-3937, CVE-2026-3938, CVE-2026-3939, CVE-2026-3940, CVE-2026-3941, CVE-2026-3942

see_also:
  http://www.nessus.org/u?1432fb61
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3910
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3913
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3914
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3915
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3916
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3917
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3918
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3919
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3920
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3921
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3922
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3923
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3924
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3925
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3926
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3927
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3928
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3929
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3930
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3931
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3932
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3934
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3935
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3936
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3937
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3938
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3939
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3940
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3941
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3942


plugin_name: Microsoft Edge (Chromium) < 146.0.3856.62 (CVE-2026-3909)
plugin_family: Windows
risk_factor: Critical
hostname: MONT-WS-92245
host_ip: 164.231.187.77
protocol: tcp
svc_name: cifs
synopsis: The remote host has an web browser installed that is affected by a vulnerability.
solution: Upgrade to Microsoft Edge version 146.0.3856.62 or later.
cves: CVE-2026-3909
xrefs: CISA-KNOWN-EXPLOITED:2026/03/27
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
  The version of Microsoft Edge installed on the remote Windows host is prior to 146.0.3856.62. It is, therefore, affected by a vulnerability as referenced in the March 16, 2026 advisory.

    - Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform     out of bounds memory access via a crafted HTML page. (Chromium security severity: High) (CVE-2026-3909)

  Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

plugin_output:
  Path              : C:\Program Files (x86)\Microsoft\Edge\Application
    Installed version : 144.0.3719.115
    Fixed version     : 146.0.3856.62

see_also:
  http://www.nessus.org/u?5c53678e
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3909


plugin_name: Microsoft ASP.NET Core DoS (March 2026)
plugin_family: Windows : Microsoft Bulletins
risk_factor: High
hostname: MONT-WS-92095
host_ip: 164.231.187.75
protocol: tcp
svc_name: cifs
synopsis: The remote Windows host is affected by a denial of service vulnerability.
solution: Update ASP.NET Core to version 8.0.25, 9.0.14, 10.0.4 or later.
cves: CVE-2026-26130
workflow_status: Open
created_at: 2026-04-02 16:52:05
updated_at: 2026-04-02 16:52:05
credentialed: Yes
description:
  The version of ASP.NET Core installed on the remote Windows host is 8.0.x prior to 8.0.25, 9.0.x prior to 9.0.14, or 10.0.x prior to 10.0.4. It is, therefore, affected by a denial of service vulnerability. A specially crafted message to a SignalR server can cause uncontrolled resource consumption, exhausting an internal buffer and leading to denial of service.

  Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

plugin_output:
  Path              : C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.24
    Installed version : 8.0.24
    Fixed version     : 8.0.25

xrefs:
  MSKB:5081278, MSKB:5081277, MSKB:5081276, MSFT:MS26-5081278, MSFT:MS26-5081277, MSFT:MS26-5081276, IAVA:2026-A-0225

see_also:
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26130
  https://github.com/dotnet/aspnetcore/issues/65727
  http://www.nessus.org/u?5492958f
  http://www.nessus.org/u?83dd3f59
  http://www.nessus.org/u?2e94e4fc
  https://support.microsoft.com/en-us/help/5081278
  https://support.microsoft.com/en-us/help/5081277
  https://support.microsoft.com/en-us/help/5081276


