diff --git a/monkey/monkey_island/cc/ui/src/components/report-components/SecurityReport.js b/monkey/monkey_island/cc/ui/src/components/report-components/SecurityReport.js
index 802d413df..82ac51735 100644
--- a/monkey/monkey_island/cc/ui/src/components/report-components/SecurityReport.js
+++ b/monkey/monkey_island/cc/ui/src/components/report-components/SecurityReport.js
@@ -315,24 +315,24 @@ class ReportPageComponent extends AuthComponent {
Machines are accessible using passwords supplied by the user during the Monkey’s
configuration.}
{this.state.report.overview.issues[this.Issue.AZURE] &&
- Azure machines expose plaintext passwords. (
+ Azure machines expose plaintext passwords (
)
+ more info
+ ).
}
{this.state.report.overview.issues[this.Issue.STRUTS2] &&
- Struts2 servers are vulnerable to remote code execution. (
+ Struts2 servers are vulnerable to remote code execution (
)
+ ).
}
{this.state.report.overview.issues[this.Issue.WEBLOGIC] &&
Oracle WebLogic servers are susceptible to a remote code execution vulnerability.}
@@ -417,10 +417,20 @@ class ReportPageComponent extends AuthComponent {
generateZerologonOverview() {
let zerologonOverview = [];
-
+ if (this.state.report.overview.issues[this.Issue.ZEROLOGON]) {
+ zerologonOverview.push(<>
+ Some Windows domain controllers are vulnerable to 'Zerologon' (
+ ).
+ >)
+ }
if (this.state.report.overview.issues[this.Issue.ZEROLOGON_PASSWORD_RESTORE_FAILED]) {
zerologonOverview.push(
-
+
Automatic password restoration on a domain controller failed!
)
}
- if (this.state.report.overview.issues[this.Issue.ZEROLOGON]) {
- zerologonOverview.push(<>
- Some domain controllers are vulnerable to Zerologon exploiter(
- )!
- >)
- } else {
+ else {
return null;
}
return ({zerologonOverview})
@@ -989,8 +989,8 @@ class ReportPageComponent extends AuthComponent {
href='https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/xp-cmdshell-server-configuration-option?view=sql-server-2017'
target={'_blank'}
className={'security-report-link'}>
- Microsoft's documentation.
-
+ Microsoft's documentation
+ .
>
);
@@ -1013,8 +1013,8 @@ class ReportPageComponent extends AuthComponent {
href='https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2020-1472'
target={'_blank'}
className={'security-report-link'}>
- Microsoft's documentation.
-
+ Microsoft's documentation
+ .
{!issue.password_restored &&