id: avatier-password-management
info:
name: Avatier Password Management Panel
author: praetorian-thendrickson,iamthefrogy,dhiyaneshDK
severity: info
description: An Avatier password management panel was detected.
reference:
- https://www.exploit-db.com/ghdb/6576
- https://www.avatier.com/products/identity-management/password-management/
metadata:
shodan-query: http.favicon.hash:983734701
tags: panel,avatier,aims
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0.0
cwe-id: CWE-200
requests:
- method: GET
path:
- '{{BaseURL}}/aims/ps/'
redirects: true
max-redirects: 2
matchers-condition: or
matchers:
- type: word
words:
- 'LabelWelcomeToPS'
- 'Avatier Corporation'
- 'Welcome to Password Management'
condition: or
- 'Password Management Client'
# Enhanced by mp on 2022/03/20
