Protocol: Insecure Technology Used¶

Identifier: insecure_technology_used

Scanner Support¶

Description¶

Inherently insecure technologies: cleartext protocols such as FTP or Telnet, or services known to lack confidentiality and integrity guarantees: shouldn't be exposed on untrusted networks.

How we test: When the technology fingerprinting step identifies a known-insecure protocol or product on a host, we report it so it can be replaced (for example FTP → SFTP, Telnet → SSH) or restricted to a trusted network.

Configuration¶

Example¶

Example configuration:

---
security_tests:
  insecure_technology_used:
    skip: false

Reference¶

skip¶

Type: boolean

Skip the test if true.