2020-12-01 13:20:54 +00:00
id : oipm-detect
2022-04-22 10:38:41 +00:00
2020-12-01 13:20:54 +00:00
info :
2022-02-11 16:44:15 +00:00
name : One Identity Password Manager Detection
2020-12-01 13:20:54 +00:00
author : nodauf
severity : info
2022-04-22 10:38:41 +00:00
description : One Identity Password Manager is a secure password manager that gives enterprises control over password management, policies, and automated reset functions.
reference :
- https://www.oneidentity.com/techbrief/security-guide-for-password-manager821177/
2024-04-08 11:34:33 +00:00
remediation : Ensure proper access.
2022-02-11 16:44:15 +00:00
classification :
cwe-id : CWE-200
2024-03-26 08:03:04 +00:00
cpe : cpe:2.3:a:oneidentity:password_manager:*:*:*:*:*:*:*:*
2023-04-28 08:11:21 +00:00
metadata :
2024-03-23 09:28:19 +00:00
max-request : 1
2024-04-08 11:30:07 +00:00
product : password_manager
2024-04-08 11:34:33 +00:00
vendor : oneidentity
2024-03-26 08:03:04 +00:00
tags : panel,oneidentity
2022-04-22 10:38:41 +00:00
2023-04-27 04:28:59 +00:00
http :
2020-12-01 13:20:54 +00:00
- method : GET
path :
- '{{BaseURL}}/PMUser/'
2023-10-14 11:27:55 +00:00
2020-12-01 13:20:54 +00:00
matchers :
- type : word
words :
2022-02-11 16:44:15 +00:00
- "One Identity Password Manager"
2024-03-26 08:05:26 +00:00
# digest: 4a0a004730450220131fe37e04ee50927ea2f263e4acfeebad516f0b25762e81a6fdaeb2d9832dfb022100a15fe24d3c896e6127db0b288051cf202d16a720f61b3b82197a436ab43b4b86:922c64590222798bb761d5b6d8e72950