40 lines
1.0 KiB
YAML
40 lines
1.0 KiB
YAML
id: password-protected-consolemenu
|
|
|
|
info:
|
|
name: Netgate Password Protection Configuration - Detect
|
|
author: pussycat0x
|
|
severity: info
|
|
description: |
|
|
Netgate password protection via the Console Menu is recommended to be configured. An unattended computer with an open Console Menu session can allow an unauthorized user access to the firewall management.
|
|
reference: |
|
|
https://docs.netgate.com/pfsense/en/latest/config/advanced-admin.html
|
|
classification:
|
|
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
|
|
cvss-score: 0.0
|
|
cwe-id: CWE-200
|
|
metadata:
|
|
verified: true
|
|
tags: firewall,config,audit,pfsense,file
|
|
|
|
file:
|
|
- extensions:
|
|
- xml
|
|
|
|
matchers-condition: and
|
|
matchers:
|
|
- type: word
|
|
words:
|
|
- "<disableconsolemenu>"
|
|
- "<disableconsolemenu>1</disableconsolemenu>"
|
|
condition: or
|
|
negative: true
|
|
|
|
- type: word
|
|
words:
|
|
- "<pfsense>"
|
|
- "<webgui>"
|
|
- "<system>"
|
|
condition: and
|
|
|
|
# Enhanced by md on 2023/05/04
|