Network Management

False Positive in Vulnerability Scanners for the SolarWinds Platform website using insecure HTTP methods

This article addresses an issue where the Nessus vulnerability scanner flags the SolarWinds Platform website for not blocking insecure HTTP methods.

First published date

8/10/2023 12:52 PM

Last published date

8/10/2023 12:52 PM

Overview

The Nessus vulnerability scanner identifies that the SolarWinds Platform website does not block insecure HTTP methods, recommending they be blocked if they are not used. However, blocking the methods might affect some features of SolarWinds Hybrid Cloud Observability, such as NetPath™.

Product section

Network Performance Monitor

Cause

Vulnerability scanners report not blocking HTTP methods PUT, DELETE, TRACE, and TRACK as being insecure. However, these methods are used by some SolarWinds Hybrid Cloud Observability features that might be affected as a result.

Resolution

SolarWinds recommends you do not block the flagged methods. In SolarWinds Hybrid Cloud Observability and SolarWinds Network Performance Monitor, the methods are implemented securely. Blocking the reported methods might affect some features.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third-party content at your own risk, and you will be solely responsible for the incorporation of the same if any.