2020-12-01 13:20:54 +00:00
id : oipm-detect
2022-04-22 10:38:41 +00:00
2020-12-01 13:20:54 +00:00
info :
2022-02-11 16:44:15 +00:00
name : One Identity Password Manager Detection
2020-12-01 13:20:54 +00:00
author : nodauf
severity : info
2022-04-22 10:38:41 +00:00
description : One Identity Password Manager is a secure password manager that gives enterprises control over password management, policies, and automated reset functions.
2024-06-07 10:04:29 +00:00
remediation : Ensure proper access.
2022-04-22 10:38:41 +00:00
reference :
- https://www.oneidentity.com/techbrief/security-guide-for-password-manager821177/
2022-02-11 16:44:15 +00:00
classification :
cwe-id : CWE-200
2024-03-26 08:03:04 +00:00
cpe : cpe:2.3:a:oneidentity:password_manager:*:*:*:*:*:*:*:*
2023-04-28 08:11:21 +00:00
metadata :
2024-03-23 09:28:19 +00:00
max-request : 1
2024-04-08 11:34:33 +00:00
vendor : oneidentity
2024-06-07 10:04:29 +00:00
product : password_manager
2024-03-26 08:03:04 +00:00
tags : panel,oneidentity
2022-04-22 10:38:41 +00:00
2023-04-27 04:28:59 +00:00
http :
2020-12-01 13:20:54 +00:00
- method : GET
path :
- '{{BaseURL}}/PMUser/'
2023-10-14 11:27:55 +00:00
2020-12-01 13:20:54 +00:00
matchers :
- type : word
words :
2022-02-11 16:44:15 +00:00
- "One Identity Password Manager"
2024-06-08 16:02:17 +00:00
# digest: 4a0a00473045022100a942d91845e68028ccc7631ccfc503b883427fa400420fc3b4285ccc41e9474b022025e99e695d0d33e8f18f7fdb9f72a4398bf21a926643331f069cca175b676f4f:922c64590222798bb761d5b6d8e72950