diff --git a/monkey/monkey_island/cc/ui/src/components/report-components/SecurityReport.js b/monkey/monkey_island/cc/ui/src/components/report-components/SecurityReport.js index 802d413df..82ac51735 100644 --- a/monkey/monkey_island/cc/ui/src/components/report-components/SecurityReport.js +++ b/monkey/monkey_island/cc/ui/src/components/report-components/SecurityReport.js @@ -315,24 +315,24 @@ class ReportPageComponent extends AuthComponent {
  • Machines are accessible using passwords supplied by the user during the Monkey’s configuration.
  • } {this.state.report.overview.issues[this.Issue.AZURE] && -
  • Azure machines expose plaintext passwords. ( +
  • Azure machines expose plaintext passwords ( ) + more info + ).
  • } {this.state.report.overview.issues[this.Issue.STRUTS2] && -
  • Struts2 servers are vulnerable to remote code execution. ( +
  • Struts2 servers are vulnerable to remote code execution ( ) + ).
  • } {this.state.report.overview.issues[this.Issue.WEBLOGIC] &&
  • Oracle WebLogic servers are susceptible to a remote code execution vulnerability.
  • } @@ -417,10 +417,20 @@ class ReportPageComponent extends AuthComponent { generateZerologonOverview() { let zerologonOverview = []; - + if (this.state.report.overview.issues[this.Issue.ZEROLOGON]) { + zerologonOverview.push(<> + Some Windows domain controllers are vulnerable to 'Zerologon' ( + ). + ) + } if (this.state.report.overview.issues[this.Issue.ZEROLOGON_PASSWORD_RESTORE_FAILED]) { zerologonOverview.push( - +
    Automatic password restoration on a domain controller failed! )! - ) - } else { + else { return null; } return (
  • {zerologonOverview}
  • ) @@ -989,8 +989,8 @@ class ReportPageComponent extends AuthComponent { href='https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/xp-cmdshell-server-configuration-option?view=sql-server-2017' target={'_blank'} className={'security-report-link'}> - Microsoft's documentation. - + Microsoft's documentation + . ); @@ -1013,8 +1013,8 @@ class ReportPageComponent extends AuthComponent { href='https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2020-1472' target={'_blank'} className={'security-report-link'}> - Microsoft's documentation. - + Microsoft's documentation + . {!issue.password_restored &&