Web

A5 Security Misconfiguration

Good security requires having a secure configuration defined and deployed for the application, frameworks, application server, web server, database server, and platform. Secure settings should be defined, implemented, and maintained, as defaults are often insecure. Additionally, software should be kept up to date.

Check the Server Configuration:

·         Check the Server hardening

·         Avoid using FTP

The solution: use Drupal and secure it.

a) Drupal vs OWASP Top Ten

vulnerabilities and threats. CMS Security should be addressed.