7MS #341: How to Fix Unquoted Service Paths




7 Minute Security show

Summary: <p>Today's episode is brought to you by my friends at <a href="https://safepass.me" rel="nofollow noreferrer noopener" target="_blank">safepass.me</a>. Safepass.me is the most efficient and cost-effective solution to prevent Active Directory users from setting a weak or compromised password. It's in compliance with the latest NIST password guidelines, and is the only enterprise solution to protect organizations against credential stuffing and password spraying attacks. Visit <a href="https://safepass.me" rel="nofollow noreferrer noopener" target="_blank">safepass.me</a> for more details, and tell them 7 Minute Security sent you to get a 10% discount!</p> <p>In today's episode we talk about how to identify - and resolve - unquoted service paths. Maybe you've seen this pop up in your vulnerability scanner and aren't quite sure what the risk is or how to fix it - and maybe more importantly, how to fix it at <em>scale</em> if need be. That's the technical conundrum I faced this week, so I talk about some resources to help you identify this risk and get it out of your environment!</p> <p>And here's a gist I wrote that walks you through everything step by step:</p>