2024-07-02 18:16:56 +00:00
|
|
|
id: apache-pinot-config
|
|
|
|
|
|
|
|
|
|
info:
|
|
|
|
|
name: Apache Pinot - Exposure
|
|
|
|
|
author: icarot
|
|
|
|
|
severity: medium
|
|
|
|
|
description: |
|
|
|
|
|
Detects if path Appconfigs of Apache Pinot web application is exposed, getting internal information about the configuration made.
|
|
|
|
|
classification:
|
|
|
|
|
cpe: cpe:2.3:a:apache:pinot:*:*:*:*:*:*:*:*
|
|
|
|
|
metadata:
|
|
|
|
|
max-request: 1
|
2024-07-04 07:47:56 +00:00
|
|
|
verified: true
|
2024-07-02 18:16:56 +00:00
|
|
|
vendor: apache
|
|
|
|
|
product: pinot
|
2024-07-04 07:47:56 +00:00
|
|
|
shodan-query: title:"Apache Pinot"
|
|
|
|
|
tags: config,exposure,pinot,apache
|
2024-07-02 18:16:56 +00:00
|
|
|
|
|
|
|
|
http:
|
|
|
|
|
- method: GET
|
|
|
|
|
path:
|
|
|
|
|
- "{{BaseURL}}/appconfigs"
|
|
|
|
|
|
|
|
|
|
matchers-condition: and
|
|
|
|
|
matchers:
|
|
|
|
|
- type: word
|
2024-07-04 07:47:56 +00:00
|
|
|
part: body
|
2024-07-02 18:16:56 +00:00
|
|
|
words:
|
2024-07-04 07:47:56 +00:00
|
|
|
- '"systemConfig"'
|
|
|
|
|
- '"pinotConfig"'
|
|
|
|
|
- '"jvmConfig"'
|
2024-07-02 18:16:56 +00:00
|
|
|
condition: and
|
2024-07-04 07:47:56 +00:00
|
|
|
|
|
|
|
|
- type: word
|
|
|
|
|
part: header
|
|
|
|
|
words:
|
|
|
|
|
- 'application/json'
|
|
|
|
|
|
2024-07-02 18:16:56 +00:00
|
|
|
- type: status
|
|
|
|
|
status:
|
|
|
|
|
- 200
|
2024-07-04 08:12:38 +00:00
|
|
|
# digest: 4a0a004730450220435aba0dea794b353c1b8d95f9f95755b420236ff5ec0dacc9e8e4e28bb324de022100bce132098d9f1d6f3c5b7ad79bfbe52d6c36559081d7809ebda052cfa51f4f1c:922c64590222798bb761d5b6d8e72950
|
