3 ms·
>5,406 unresolved SPLs—about 86 percent of which were rated high or critical >JPL did not effectively address a known software vulnerability, first identified
by kryogen1c 7y ago
>5,406 unresolved SPLs—about
86 percent of which were rated high or critical
>JPL did not effectively address a known software vulnerability, first identified in 2017, with a critical
score of 10. This software flaw can be used by cyberattackers to remotely execute malicious code
>one of the projects has a waiver of JPL IT security requirements to change passwords
every 90 days. Instead, the project relies on a designated application and team accounts to share
password files, group files, host tables, and other files over the network
There seems to be a fair amount of filler in the report (review access logs, out of date inventory, etc) but these points seem pretty damning.
- blantonl 7y agoIf I was a betting man, I'd bet that there are some old dusty areas of NASA facilities where there are open NFS exports, NIS providing security, and Sun workstations doing work. I bet someone could fire up a SATAN scanning instance with a Mosaic browser and find some open stuff on some of those old and crusty computers. :)
- carroccio 7y agoThanks for making me remember Saint and Satan times! Also Nessus was open source.
- Something1234 7y agoCan we get more details about this Satan thing?
- dredmorbius 7y agoSecurity Administrator Tool for Analyzing Networks (Or, if you repent, SANTA.) https://en.wikipedia.org/wiki/Security_Administrator_Tool_for_Analyzing_Networks https://en.wikipedia.org/wiki/Security_Administrator_Tool_fo...
- Something1234 7y agoSo an early version of metasploit?