Submit a ticketCall us

Training ClassThe Orion® Platform Instructor-led Classes

Provided by SolarWinds® Academy, these trainings will introduce users to the Orion Platform and its features, management, and navigation. These courses are suitable for users looking to discover new tips, tricks, and ways to adapt their Orion products to better suit their monitoring needs:
Deploying the Orion Platform
Configuring Orion views, maps, and accounts
Configuring Orion alerts and reports

Reserve your seat.

Home > Success Center > Netflow Traffic Analyzer (NTA) > NTA - Knowledgebase Articles > Tenable security scan reports vulnerability on the NTA Flow Storage Database server

Tenable security scan reports vulnerability on the NTA Flow Storage Database server

Updated March 1, 2017

Overview

A Tenable vulnerability scan reports the following on the NTA Flow Storage Database server:

 

Synopsis:


The remote ASP.NET web server does not have custom errors set


Description:


The remote ASP.NET web server is configured to show verbose error messages, which might lead to the disclosure of potentially sensitive information about the remote installation (such as the path under which the remote web server resides) or about the remote ASP.NET applications.


Solution:


Configure the server so that the option 'customErrors mode' is set to 'On' instead of 'Off'


Plugin Text:


Plugin Output:

 

The following error message could be obtained :
[HttpException]: The type initializer for 'SolarWinds.Orion.Core.Common.ModulesCollector' threw an exception.
   at System.Web.HttpApplicationFactory.EnsureAppStartCalledForIntegratedMode(HttpContext context, HttpApplication app)
   at System.Web.HttpApplication.RegisterEventSubscriptionsWithIIS(IntPtr appContext, HttpContext context, MethodInfo[] handlers)
   at System.Web.HttpApplication.InitSpecial(HttpApplicationState state, MethodInfo[] handlers, IntPtr appContext, HttpContext context)
   at System.Web.HttpApplicationFactory.GetSpecialApplicationInstance(IntPtr appContext, HttpContext context)
   at System.Web.Hosting.PipelineRuntime.InitializeApplication(IntPtr appContext)
[HttpException]: The type initializer for 'SolarWinds.Orion.Core.Common.ModulesCollector' threw an exception.
   at System.Web.HttpRuntime.FirstRequestInit(HttpContext context)
   at System.Web.HttpRuntime.EnsureFirstRequestInit(HttpContext context)
   at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerRequest wr, HttpContext context)

 

Environment

All NTA versions

 

Cause 

This is caused by IIS installed with specific settings on the NTA Flow Storage Database server after the initial NTA installation has occurred.

 

Resolution

Uninstall IIS from the NTA Flow Storage Database server.

 

 

 

Last modified

Tags

Classifications

Public