VMware Virtual Machine with Unity Interlock feature enabled
A VMware virtual machine is a software-based emulation of a physical computer. VMware Unity Interlock feature should be disabled if...
Blog
Insecure file permission
An important file ({ConfigurationFile.Path}) has been identified with permission mask against best practices. Permission mask is set to {ConfigurationFile.PermissionMask} instead...
NPM package potentially vulnerable to dependency confusion attack
A Dependency Confusion attack occurs when a software installer script is tricked into pulling a malicious package from a public...
Docker container escape
Docker Socket '{DockerSocket}' was found to have mounted sockets. Docker socket is the UNIX socket that Docker is listening to....
PyPi package potentially vulnerable to dependency confusion attack
A Dependency Confusion attack occurs when a software installer script is tricked into pulling a malicious package from a public...
Redundant Service Found on Windows VM
It was found that a few redundant services are running on the server. As a best practice, it is recommended...
RDS database cluster is using an unsupported engine version
RDS database cluster ""{AwsRdsDbCluster}"" is using an unsupported engine version. The database engine is ""{AwsRdsDbCluster.Engine}"" and the current version being...
VMware Virtual Machine with connected serial ports
A VMware virtual machine is a software-based emulation of a physical computer. It was detected that the VMware VM {VmwareVm.Name}...
Kubernetes node’s kubelet –tls-cert-file and –tls-private-key-file are not set
Kubelet communication contains sensitive parameters that should remain encrypted in transit. Orca has detected that the --tls-cert-file or --tls-private-key-file arguments...