SMB null session

Description

It's possible to establish a NULL session to this host. A null session is a session established with a server when no credentials are supplied. Use of null sessions, however, can expose information to an anonymous user that could compromise security on a system.

Remediation

It's recommended to disallow null sessions to the fullest extent possible.

References
Severity
Classification
Tags
  • Information Disclosure  Configuration  Network Alert