What to do about a Critical Vulnerability
The following vulnerabilities have been declared to be
so severe that mitigation measures are MANDATORY for network connection
at Fermilab. Mitigations are in order of preference:
- Remove, reconfigure, or disable the affected software
- Patch the affected software to a current enough level to fix the vulnerability.
- Remove the machine from the Fermilab network
- After you fix your vulnerabilities, remember to update the remediation actions taken in TIssue to lift the network block
In exceptional circumstances, one can request permission to
restrict access to the host machine to a tightly controlled list of inbound connections.
You can also scan yourself using the site Nessus scanner.
List of Critical Vulnerabilities
|