Test ID:	1.3.6.1.4.1.25623.1.0.10778
Category:	Web application abuses
Title:	Unprotected SiteScope Service (HTTP)
Summary:	The SiteScope web service has no password set. An attacker; who can connect to this server could view usernames and; passwords stored in the preferences section or reconfigure; the service.
Description:	Summary: The SiteScope web service has no password set. An attacker who can connect to this server could view usernames and passwords stored in the preferences section or reconfigure the service. Solution: Make sure that a password is set in the configuration for this service. Depending on where this server is located, you may want to restrict access by IP address in addition to username. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-1999-0507 https://www.cve.org/CVERecord?id=CVE-1999-0507 Common Vulnerability Exposure (CVE) ID: CVE-1999-0508 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0508
Copyright	Copyright (C) 2001 Digital Defense Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.