Auger
85 of 85 entries
| ID | Risk | Title | CVSS | CWE |
|---|---|---|---|---|
AU-001 |
CouchDB Default Credentials: {user}/{pwd} | — | — | |
AU-002 |
End-of-Life Cassandra Version: {ver} | — | — | |
AU-003 |
End-of-Life Elasticsearch Version: {ver} | — | — | |
AU-004 |
End-of-Life MongoDB Version: {ver} | — | — | |
AU-005 |
End-of-Life MSSQL Version: SQL Server {yr} | — | — | |
AU-006 |
End-of-Life MySQL/MariaDB Version: {ver} | — | — | |
AU-007 |
End-of-Life Oracle Database Version: {ver} | — | — | |
AU-008 |
End-of-Life PostgreSQL Version: {ver_num} | — | — | |
AU-009 |
End-of-Life Redis Version: {ver} | — | — | |
AU-010 |
InfluxDB Default Credentials: {user}/{pwd} | — | — | |
AU-011 |
Neo4j Dangerous Procedure Publicly Accessible: {name} | — | — | |
AU-012 |
Neo4j Default Credentials: {user}/{pwd} | — | — | |
AU-013 |
Audit Logging Disabled | — | — | |
AU-014 |
Cassandra: AllowAllAuthenticator Configured (No Authentication) | — | — | |
AU-015 |
Cassandra: Client-to-Server Encryption Disabled | — | — | |
AU-016 |
Cassandra: Default cassandra/cassandra Credentials in Use | — | — | |
AU-017 |
Cassandra: Multiple Superuser Accounts | — | — | |
AU-018 |
Cleartext Database Protocol (No TLS/SSL) | — | — | |
AU-019 |
CouchDB Admin Party Mode — No Admin Accounts Configured | — | — | |
AU-020 |
CouchDB Node Configuration Exposed Without Authentication | — | — | |
AU-021 |
CouchDB: Unauthenticated Access to /_all_dbs | — | — | |
AU-022 |
Dangerous Oracle PUBLIC Execute Grants (UTL_FILE/DBMS_SQL etc.) | — | — | |
AU-023 |
Database Listening on All Network Interfaces (0.0.0.0) | — | — | |
AU-024 |
Default Credentials in Use | — | — | |
AU-025 |
Elasticsearch: Index Enumeration Without Authentication | — | — | |
AU-026 |
Elasticsearch: Security Features Disabled (X-Pack Security) | — | — | |
AU-027 |
Elasticsearch: Unauthenticated Cluster Information Exposed | — | — | |
AU-028 |
Excessive Oracle System Privileges Granted to Non-SYS Accounts | — | — | |
AU-029 |
Expired TLS Certificate | — | — | |
AU-030 |
InfluxDB 2.x Buckets Exposed Without Authentication | — | — | |
AU-031 |
InfluxDB 2.x Initial Setup Not Completed | — | — | |
AU-032 |
InfluxDB 2.x: Authorizations Endpoint Accessible Without Token | — | — | |
AU-033 |
Memcached: Cached Data Keys Enumerable Without Authentication | — | — | |
AU-034 |
Memcached: No Authentication (SASL Not Supported) | — | — | |
AU-035 |
Memcached: Runtime Statistics Accessible Without Authentication | — | — | |
AU-036 |
Memcached: SASL Authentication Disabled | — | — | |
AU-037 |
MongoDB: Authentication Disabled | — | — | |
AU-038 |
MongoDB: No TLS/SSL Configured | — | — | |
AU-039 |
MongoDB: Server-Side JavaScript Execution Enabled | — | — | |
AU-040 |
MongoDB: User with Root or __system Role | — | — | |
AU-041 |
MSSQL: Ad Hoc Distributed Queries Enabled | — | — | |
AU-042 |
MSSQL: BUILTIN\\Administrators in Sysadmin Role | — | — | |
AU-043 |
MSSQL: CLR Integration Enabled | — | — | |
AU-044 |
MSSQL: Database Mail Enabled | — | — | |
AU-045 |
MSSQL: Linked Servers Configured | — | — | |
AU-046 |
MSSQL: Mixed Mode Authentication with SQL Logins Not Subject to Password Policy | — | — | |
AU-047 |
MSSQL: OLE Automation Procedures Enabled | — | — | |
AU-048 |
MSSQL: SA Account Enabled | — | — | |
AU-049 |
MSSQL: Transparent Data Encryption (TDE) Not Enabled | — | — | |
AU-050 |
MSSQL: xp_cmdshell Enabled | — | — | |
AU-051 |
MySQL: Anonymous User Account Present | — | — | |
AU-052 |
MySQL: General Query Log Enabled | — | — | |
AU-053 |
MySQL: LOCAL INFILE Enabled | — | — | |
AU-054 |
MySQL: Password Validation Plugin Not Installed | — | — | |
AU-055 |
MySQL: Password Validation Policy Set to LOW | — | — | |
AU-056 |
MySQL: Root Account Accessible Remotely | — | — | |
AU-057 |
MySQL: secure_file_priv Not Configured | — | — | |
AU-058 |
MySQL: sql_mode Too Permissive | — | — | |
AU-059 |
MySQL: Symlink Support Enabled | — | — | |
AU-060 |
MySQL: Test Database Present and Accessible | — | — | |
AU-061 |
MySQL: TLS Not Required (Optional Only) | — | — | |
AU-062 |
MySQL: User Account with Wildcard Host (%) | — | — | |
AU-063 |
Neo4j Authentication Disabled (dbms.security.auth_enabled=false) | — | — | |
AU-064 |
Neo4j Cluster Mode Detected — Verify Firewall Isolation | — | — | |
AU-065 |
Oracle Accounts Using Weak 10g DES Password Hash | — | — | |
AU-066 |
Oracle Default Sample Schema Accounts Active | — | — | |
AU-067 |
Oracle Label Security (OLS) Not Enabled | — | — | |
AU-068 |
Oracle REMOTE_OS_AUTHENT Enabled | — | — | |
AU-069 |
Oracle Unified Auditing Disabled | — | — | |
AU-070 |
Oracle UTL_FILE_DIR Wildcard — Arbitrary File Read/Write | — | — | |
AU-071 |
PostgreSQL: Connection Logging Disabled | — | — | |
AU-072 |
PostgreSQL: COPY TO/FROM PROGRAM Feature Accessible | — | — | |
AU-073 |
PostgreSQL: Dangerous Extensions Installed | — | — | |
AU-074 |
PostgreSQL: Excessive Permissions on Public Schema | — | — | |
AU-075 |
PostgreSQL: Row-Level Security Not Enabled on Sensitive Tables | — | — | |
AU-076 |
PostgreSQL: Superuser Account Accessible Remotely | — | — | |
AU-077 |
PostgreSQL: Weak Password Encryption (MD5) | — | — | |
AU-078 |
Redis: Dangerous Commands Not Renamed or Disabled | — | — | |
AU-079 |
Redis: Default ACL User Has Full Access (nopass +@all) | — | — | |
AU-080 |
Redis: No Authentication Configured (requirepass Not Set) | — | — | |
AU-081 |
Redis: Protected Mode Disabled | — | — | |
AU-082 |
Self-Signed or Expired TLS Certificate | — | — | |
AU-083 |
Sensitive Data Columns Identified (Potential PII/PHI/PCI Scope) | — | — | |
AU-084 |
Weak Cipher Suites Accepted | — | — | |
AU-085 |
Weak TLS Version (TLS 1.0 or TLS 1.1) | — | — |