We were informed that there is a client-side desync vulnerability associated with the following URL on our PA server:

https://xxx.xxx.xxx.xxx:81/shared/pa_report.css

Is there a way to disable the embedded HTTP server? Or is there a way to mitigate this vulnerability?

Please advise - thank you.

asked 10 Feb '23, 15:28

5tafd444's gravatar image

5tafd444
112
accept rate: 0%


We've just pushed out an update for this in version 9.1.0.9 available at:

https://www.poweradmin.com/products/server-monitoring/downloads/preview/

To answer the question, you can disable the embedded HTTPS server by setting

HKLMsoftwarePAServerMonitor ReportHTTPPort = 0

However, be aware that the Console, helper application, Satellites, Inventory Collector (System Details) and more all communicate through that HTTPS port so this this will have an impact on a number of things.

link

answered 13 Feb '23, 15:00

Doug's gravatar image

Doug ♦♦
10.2k122138
accept rate: 21%

Got it, thank you Doug!

link

answered 13 Feb '23, 15:02

5tafd444's gravatar image

5tafd444
112
accept rate: 0%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×57
×8
×3
×2

Asked: 10 Feb '23, 15:28

Seen: 1,628 times

Last updated: 13 Feb '23, 15:02