Lucene search
K

Database Authentication Failure(s) for Provided Credentials

🗓️ 24 Jun 2016 00:00:00Reported by TenableType 
nessus
 nessus
🔗 www.tenable.com👁 152 Views

Database Authentication Failure(s) for Provided Credentials. Nessus unable to log into detected database systems for authenticated checks

Code
#
# (C) Tenable Network Security, Inc.
#

include("compat.inc");

if (description)
{
  script_id(91822);
  script_version("$Revision: 1.2 $");
  script_cvs_date("$Date: 2017/12/19 20:59:32 $");

  script_name(english:"Database Authentication Failure(s) for Provided Credentials");
  script_summary(english:"Displays information about the scan.");

  script_set_attribute(attribute:"synopsis", value:
"Database credentialed checks for one or more detected database systems
have been disabled.");
  script_set_attribute(attribute:"description", value:
"Nessus was unable to log into one or more detected database systems
for which credentials have been provided in order to perform authenticated
checks.");
  script_set_attribute(attribute:"solution", value:
"Address the problem(s) so that the credentialed checks can be
executed.");
  script_set_attribute(attribute:"risk_factor", value:"None");

  script_set_attribute(attribute:"plugin_publication_date", value:"2016/06/24");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_end_attributes();

  script_category(ACT_END);

  script_copyright(english:"This script is Copyright (C) 2016-2017 Tenable Network Security, Inc.");
  script_family(english:"Settings");

  # No dependencies, since this is an ACT_END plugin
  exit(0);
}

include("misc_func.inc");
include("global_settings.inc");

failures = get_kb_list_or_exit("DB_Auth/*/FailureDetails");

report = '\nNessus was unable to log into the following database systems for which\n' +
         'credentials have been provided :\n\n';

foreach fail (keys(failures))
{
  tmp = split(fail, sep:'/', keep:FALSE);
  db_name = tmp[1];
  db_port = tmp[2];

  details = failures[fail];

  # this should never happen, but we should provide some default just in case
  if(isnull(details)) details = 'No details available';

  if(details[strlen(details) - 1] == '\n')
    details = substr(details, 0, strlen(details) - 2);

  report += '  Database        : ' + db_name + '\n' +
            '  Port            : ' + db_port + '\n' + 
            '  Failure details :\n' + details + '\n\n'; 
}

security_note(port:0, extra:report);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

19 Dec 2017 20:59Current
5.4Medium risk
Vulners AI Score5.4
152