HTTP Service Accepting Basic Auth Credentials Detected

Is there a way to disable basic authentication to Servers Check to use https instead of http when connecting to it?
ServersCheck version 16
I'm using Qualys to scan for vulnerabilities and this is coming up. QID 86763

Comments

  • adminadmin
    edited July 16
    Not for v12 or lower versions (posted in the v12 and lower thread). For v14+ you can run HTTPS. See user manual. Tip: you may want to check your network as the Monitoring Software should always run on-premises. So if there is a vulnerability then this means that someone is already inside your enterprise network. You may want to check the source of that intrusion.
Sign In or Register to comment.