2021-01-10 13:11:25 +00:00
id : ansible-tower-exposure
info :
name : Ansible Tower Exposure
2022-03-16 13:25:05 +00:00
author : pdteam,idealphase
2021-01-10 13:11:25 +00:00
severity : low
2022-03-17 17:01:45 +00:00
description : Ansible Tower was detected. Ansible Tower is a commercial offering that helps teams manage complex multi-tier deployments by adding control, knowledge, and delegation to Ansible-powered environments.
2022-03-16 13:25:05 +00:00
reference :
- https://docs.ansible.com/ansible-tower/3.8.4/html/administration/
- https://docs.ansible.com/ansible-tower/latest/html/release-notes/index.html
metadata :
google-query : intitle:"Ansible Tower"
shodan-query : title:"Ansible Tower"
tags : panel,ansible
2022-03-17 17:01:45 +00:00
classification :
cvss-metrics : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score : 0.0
cve-id :
cwe-id : CWE-200
2021-01-10 13:11:25 +00:00
requests :
- method : GET
path :
2021-01-14 14:41:56 +00:00
- '{{BaseURL}}'
2021-01-10 13:11:25 +00:00
matchers :
- type : word
words :
- "<title>Ansible Tower</title>"
2022-03-16 13:25:05 +00:00
- "ansible-bootstrap"
condition : or
extractors :
- type : regex
group : 1
part : body
regex :
2022-03-17 17:01:45 +00:00
- 'href="\/static\/assets\/favicon\.ico\?v=(.+)" \/>'
# Enhanced by mp on 2022/03/16