Mount iSCSI Targets with 'None' Authentication

medium Nessus Plugin ID 100550

Language:

Synopsis

This plugin attempts to mount iSCSI targets and display returned values from an iSCSI query.

Description

Nessus was able to mount the iSCSI targets using 'None' authentication and retrieve information regarding the vendor ID, product ID and product revision level.

Solution

Implement authenticated connections between initiator and targets.

Plugin Details

Severity: Medium

ID: 100550

File Name: iscsi_mount_target.nbin

Version: 1.69

Type: remote

Family: Misc.

Published: 5/31/2017

Updated: 10/22/2024

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

CVSS Score Rationale: Information disclosure

CVSS v2

Risk Factor: Medium

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS Score Source: manual

CVSS v3

Risk Factor: Medium

Base Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Vulnerability Information

Required KB Items: iscsi/target

Detections

Analytics