logo

Database

Description

Due to an improper configuration of the server (e.g., an FTP service with username: anonymous and password: guest or an SMTP open relay), it is possible to make anonymous connections to it and access otherwise protected resources.

Impact

Read and/or modify files within the service.

Recommendation

Configure the services to avoid services enumeration or to connect to these anonymously.

Threat

Anonymous attacker from adjacent network.

Expected Remediation Time

⏱️ 30 minutes.