nuclei-templates/http/exposed-panels/jboss/jboss-jbpm-admin.yaml

37 lines
1.1 KiB
YAML
Raw Normal View History

2023-02-07 20:34:55 +00:00
id: jboss-jbpm-admin
info:
name: JBoss jBPM Administration Console Login Panel - Detect
2023-02-07 20:34:55 +00:00
author: DhiyaneshDK
severity: info
description: JBoss jBPM Administration Console login panel was detected.
2023-02-07 20:34:55 +00:00
reference:
- https://github.com/PortSwigger/j2ee-scan/blob/master/src/main/java/burp/j2ee/issues/impl/JBossjBPMAdminConsole.java
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cwe-id: CWE-200
cpe: cpe:2.3:a:redhat:jbpm:*:*:*:*:*:*:*:*
2023-02-07 20:34:55 +00:00
metadata:
verified: true
2023-10-14 11:27:55 +00:00
max-request: 1
vendor: redhat
product: jbpm
2023-02-07 20:34:55 +00:00
shodan-query: html:"JBossWS"
tags: jboss,panel,login,redhat
2023-02-07 20:34:55 +00:00
http:
2023-02-07 20:34:55 +00:00
- method: GET
path:
- '{{BaseURL}}/jbpm-console/app/tasks.jsf'
matchers-condition: and
matchers:
- type: word
part: body
words:
2023-02-09 04:50:29 +00:00
- 'JBoss jBPM Administration Console'
2023-02-07 20:34:55 +00:00
- type: status
status:
- 200
# digest: 4a0a0047304502205d52884a8aa1f032e292c835537066ed1f5555b85b89e7a721f4e15f588849ac022100efb323d75eb302f9546e8b0dc7c49e54bee0ee11acd16282c6019d7fdd74d8de:922c64590222798bb761d5b6d8e72950