Test ID:	1.3.6.1.4.1.25623.1.0.114017
Category:	Default Accounts
Title:	Portainer UI No Authentication Vulnerability (HTTP)
Summary:	The script checks if the Portainer Dashboard UI has no; authentication enabled at the remote web server.
Description:	Summary: The script checks if the Portainer Dashboard UI has no authentication enabled at the remote web server. Vulnerability Insight: The installation of Portainer might be misconfigured and therefore unprotected and exposed to the public. Vulnerability Impact: Access to the dashboard gives you top level access to all aspects of administration for the cluster it is assigned to manage. That includes managing applications, containers, starting workloads, adding and modifying applications, and setting key security controls. Solution: It is highly recommended to enable authentication and create an administrator user to avoid exposing your dashboard with administrator privileges to the public. Always choose a secure password, especially if your dashboard is exposed to the public. CVSS Score: 9.7 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:P
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.