<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Vulnerability Name- Potentially risky methods enabled on web Server in ZoneDirector</title>
    <link>https://community.ruckuswireless.com/t5/ZoneDirector/Vulnerability-Name-Potentially-risky-methods-enabled-on-web/m-p/42846#M7655</link>
    <description>HI All  - I have observed vulnerability on my ruckus ZD 1200, vulnerability details are given below, Please suggest how to close this vulnerability.   Vulnerability Name-  Potentially risky methods enabled on web Server  Root Cause- Hardining  Service- 80,443 Risk- High  Vulnerability Details-It allow an attacker to modify the files stored on the web server and, in some scenarios, steal the credentials of legitimate users Methods - OPTIONS, GET, HEAD, POST, PUT and  DELETE  Recommendation-It is recommended to disable Put and Delete method</description>
    <pubDate>Thu, 06 Sep 2018 08:20:24 GMT</pubDate>
    <dc:creator>hemraj_mandrai</dc:creator>
    <dc:date>2018-09-06T08:20:24Z</dc:date>
    <item>
      <title>Vulnerability Name- Potentially risky methods enabled on web Server</title>
      <link>https://community.ruckuswireless.com/t5/ZoneDirector/Vulnerability-Name-Potentially-risky-methods-enabled-on-web/m-p/42846#M7655</link>
      <description>HI All  - I have observed vulnerability on my ruckus ZD 1200, vulnerability details are given below, Please suggest how to close this vulnerability.   Vulnerability Name-  Potentially risky methods enabled on web Server  Root Cause- Hardining  Service- 80,443 Risk- High  Vulnerability Details-It allow an attacker to modify the files stored on the web server and, in some scenarios, steal the credentials of legitimate users Methods - OPTIONS, GET, HEAD, POST, PUT and  DELETE  Recommendation-It is recommended to disable Put and Delete method</description>
      <pubDate>Thu, 06 Sep 2018 08:20:24 GMT</pubDate>
      <guid>https://community.ruckuswireless.com/t5/ZoneDirector/Vulnerability-Name-Potentially-risky-methods-enabled-on-web/m-p/42846#M7655</guid>
      <dc:creator>hemraj_mandrai</dc:creator>
      <dc:date>2018-09-06T08:20:24Z</dc:date>
    </item>
    <item>
      <title>Re: Vulnerability Name- Potentially risky methods enabled on web Server</title>
      <link>https://community.ruckuswireless.com/t5/ZoneDirector/Vulnerability-Name-Potentially-risky-methods-enabled-on-web/m-p/42847#M7656</link>
      <description>You don't mention what version of code you are running on your ZD 1200?</description>
      <pubDate>Thu, 06 Sep 2018 15:35:04 GMT</pubDate>
      <guid>https://community.ruckuswireless.com/t5/ZoneDirector/Vulnerability-Name-Potentially-risky-methods-enabled-on-web/m-p/42847#M7656</guid>
      <dc:creator>robert_lowe_722</dc:creator>
      <dc:date>2018-09-06T15:35:04Z</dc:date>
    </item>
    <item>
      <title>Re: Vulnerability Name- Potentially risky methods enabled on web Server</title>
      <link>https://community.ruckuswireless.com/t5/ZoneDirector/Vulnerability-Name-Potentially-risky-methods-enabled-on-web/m-p/42848#M7657</link>
      <description>Please open a ticket with TAC so we can investigate.</description>
      <pubDate>Fri, 07 Sep 2018 22:48:21 GMT</pubDate>
      <guid>https://community.ruckuswireless.com/t5/ZoneDirector/Vulnerability-Name-Potentially-risky-methods-enabled-on-web/m-p/42848#M7657</guid>
      <dc:creator>michael_brado</dc:creator>
      <dc:date>2018-09-07T22:48:21Z</dc:date>
    </item>
  </channel>
</rss>

