2022-09-08 13:28:46 +00:00
id : scp-admin
info :
2023-07-06 05:28:28 +00:00
name : Fortinet Admin-SCP Disabled - Detect
2022-09-08 13:28:46 +00:00
author : pussycat0x
severity : info
2023-05-04 14:53:29 +00:00
description : Fortinet Admin-SCP functionality is recommended to be disabled by default. Enabling SCP allows download of the configuration file from the FortiGate as an alternative method of backing up the configuration file.
2022-09-08 13:28:46 +00:00
reference : https://docs.fortinet.com/document/fortigate/6.4.0/hardening-your-fortigate/612504/hardening-your-fortigate
2023-05-04 14:53:29 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
2023-10-14 11:27:55 +00:00
cvss-score : 0
2023-05-04 14:53:29 +00:00
cwe-id : CWE-200
2023-04-14 19:44:22 +00:00
tags : audit,config,file,firewall,fortigate
2023-12-12 23:25:50 +00:00
2022-09-08 13:28:46 +00:00
file :
- extensions :
- conf
matchers-condition : and
matchers :
- type : word
words :
- "set admin-scp enable"
negative : true
- type : word
words :
- "config system"
- "config router"
- "config firewall"
2023-04-14 19:44:22 +00:00
condition : or
2023-10-20 11:41:13 +00:00
# digest: 4a0a00473045022017907ef84d543d31938a81f98b74c0e2cbb8046446564d60d93ab016b211ccbe022100bf653ab2e2a8cd2b59fe160d7c5a605fdb079fff2eb049540f0c0e59d79272dd:922c64590222798bb761d5b6d8e72950
