nuclei-templates/misconfiguration/java-melody-exposed.yaml

id: java-melody-exposed

info:
  name: JavaMelody Monitoring Exposed
  author: dhiyaneshDK,thomas_from_offensity
  severity: medium
  description: JavaMelody is a tool used to monitor Java or Java EE applications in QA and production environments. JavaMelody was detected on this web application. One option in the dashboard is to “View http sessions”. This can be used by an attacker to steal a user’s session.
  reference:
    - https://www.acunetix.com/vulnerabilities/web/javamelody-publicly-accessible/
    - https://github.com/javamelody/javamelody/wiki/UserGuide#16-security
  tags: config,java,javamelody

requests:
  - method: GET
    path:
      - '{{BaseURL}}/monitoring'
      - '{{BaseURL}}/..%3B/monitoring'

    matchers-condition: and
    matchers:
      - type: word
        words:
          - 'Monitoring JavaMelody on'
      - type: status
        status:
          - 200
-												Create java-melody-exposed.yaml
											
										
										
											2021-02-24 06:35:37 +00:00
+								id: java-melody-exposed
 								info:
 								  name: JavaMelody Monitoring Exposed
-												Updated author names

											
										
										
											2021-06-09 12:20:56 +00:00
+								  author: dhiyaneshDK,thomas_from_offensity
-												misc changes

											
										
										
											2021-02-24 17:25:41 +00:00
+								  severity: medium
-												Update java-melody-exposed.yaml

Fix trailing whitespace
											
										
										
											2021-04-14 16:19:31 +00:00
+								  description: JavaMelody is a tool used to monitor Java or Java EE applications in QA and production environments. JavaMelody was detected on this web application. One option in the dashboard is to “View http sessions”. This can be used by an attacker to steal a user’s session.
-												Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string

Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84

											
										
										
											2021-08-18 11:37:49 +00:00
+								  reference:
-												Update java-melody-exposed.yaml

Add description, references and tags
											
										
										
											2021-04-14 16:15:35 +00:00
+								    - https://www.acunetix.com/vulnerabilities/web/javamelody-publicly-accessible/
 								    - https://github.com/javamelody/javamelody/wiki/UserGuide#16-security
-												updated tags

The affected technology is JavaMelody - the given services in the tag help to mitigate the problem, however are not the affected technology themselves. 

Ref: https://www.acunetix.com/vulnerabilities/web/javamelody-publicly-accessible/
											
										
										
											2021-05-21 13:42:29 +00:00
+								  tags: config,java,javamelody
-												Create java-melody-exposed.yaml
											
										
										
											2021-02-24 06:35:37 +00:00
 								requests:
 								  - method: GET
 								    path:
 								      - '{{BaseURL}}/monitoring'
 								      - '{{BaseURL}}/..%3B/monitoring'
-												misc changes

											
										
										
											2021-02-24 17:25:41 +00:00
+								    matchers-condition: and
-												Create java-melody-exposed.yaml
											
										
										
											2021-02-24 06:35:37 +00:00
+								    matchers:
 								      - type: word
 								        words:
 								          - 'Monitoring JavaMelody on'
-												misc changes

											
										
										
											2021-02-24 17:25:41 +00:00
+								      - type: status
 								        status:
-												Update java-melody-exposed.yaml

Add description, references and tags
											
										
										
											2021-04-14 16:15:35 +00:00
+								          - 200