2020-12-01 13:20:54 +00:00
id : oipm-detect
2022-04-22 10:38:41 +00:00
2020-12-01 13:20:54 +00:00
info :
2022-02-11 16:44:15 +00:00
name : One Identity Password Manager Detection
2020-12-01 13:20:54 +00:00
author : nodauf
severity : info
2022-04-22 10:38:41 +00:00
description : One Identity Password Manager is a secure password manager that gives enterprises control over password management, policies, and automated reset functions.
2023-10-14 11:27:55 +00:00
remediation : Ensure proper access.
2022-04-22 10:38:41 +00:00
reference :
- https://www.oneidentity.com/techbrief/security-guide-for-password-manager821177/
2022-02-11 16:44:15 +00:00
classification :
cwe-id : CWE-200
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-10-14 11:27:55 +00:00
tags : panel
2022-04-22 10:38:41 +00:00
2023-04-27 04:28:59 +00:00
http :
2020-12-01 13:20:54 +00:00
- method : GET
path :
- '{{BaseURL}}/PMUser/'
2023-10-14 11:27:55 +00:00
2020-12-01 13:20:54 +00:00
matchers :
- type : word
words :
2022-02-11 16:44:15 +00:00
- "One Identity Password Manager"
2023-10-20 11:41:13 +00:00
# digest: 490a0046304402203bc5b1fb273877f24a92467497b2faabe96e06f8d5970dd3d2323ca6ae600bb0022050e12ad05d9679f8969bd80ee358b89d1de860dfc7f883f39d6f10e141a2b8f5:922c64590222798bb761d5b6d8e72950