id: yarn-manager-exposure
info:
name: Apache Yarn ResourceManager Exposure / Unauthenticated Access
author: pdteam
severity: low
tags: panel,apache,yarn,exposure
requests:
- method: GET
path:
- '{{BaseURL}}/cluster/cluster'
matchers:
- type: word
words:
- 'hadoop'
- 'resourcemanager'
- 'logged in as: dr.who'
condition: and