RSA AM 8.4 Patch 14 ACAS Plugins

[NedKelley]

Hello RSA Support;

My name is Ned Kelley, I serve as an IT Contractor, Cyber Security Engineer/ Analyst supporting the USAF.

Question concerning our RSA Authentication Manager 8.4 (Patch # 14) / Secure ID Access # 416835052

We applied RSA AM 8.4 Patch 14 to our RSA Virtual Servers. Our ACAS scans popped two  new plugin findings:

Plugin 102094 - SSH Commands require privilege escalation

Plugin 110385 - Target Credential Issues by Authentication Protocol - Insufficient privileges?

We are using Nessus Security Center version 5.8.0. Wondering if this is normal or to be expected?

Thank you;

Ned

[EdwardDavis]

The risk for both is INFO. Did you leave ssh enabled in the Operations Console ?

[PiersB]

I would also note that this is a forum for product questions, but is not technically product support.

If you need product support, please go to: RSA Support  and use the "Open a Support Case" link.