nuclei-templates/http/exposed-panels/oipm-detect.yaml

id: oipm-detect

info:
  name: One Identity Password Manager Detection
  author: nodauf
  severity: info
  description: One Identity Password Manager is a secure password manager that gives enterprises control over password management, policies, and automated reset functions.
  remediation: Ensure proper access.
  reference:
    - https://www.oneidentity.com/techbrief/security-guide-for-password-manager821177/
  classification:
    cwe-id: CWE-200
  metadata:
    vendor: oneidentity
    product: password_manager
    max-request: 1
  tags: panel

http:
  - method: GET
    path:
      - '{{BaseURL}}/PMUser/'

    matchers:
      - type: word
        words:
          - "One Identity Password Manager"
# digest: 4a0a0047304502206da1796fa0c741fc1a74e0b72f452ae0ac19aea93882aedd97b1988b55de221e022100cbe3c2fbd350bc7ff8bd553f6d4f2c10110de0c3f1a023a3c7b08c5825ceabdd:922c64590222798bb761d5b6d8e72950
Added oipm-detect 2020-12-01 13:20:54 +00:00			`id: oipm-detect`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00
Added oipm-detect 2020-12-01 13:20:54 +00:00			`info:`
Dashboard (#3693) * Enhancement: exposed-panels/oipm-detect.yaml by mp * Enhancement: exposed-panels/jenkins-login.yaml by mp * Enhancement: technologies/wuzhicms-detect.yaml by mp * Fix missing space for references, introduced in #3689 * Fix missing space for references, introduced in #3689 Correct non-standard characters Co-authored-by: sullo <sullo@cirt.net> 2022-02-11 16:44:15 +00:00			`name: One Identity Password Manager Detection`
Added oipm-detect 2020-12-01 13:20:54 +00:00			`author: nodauf`
			`severity: info`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00			`description: One Identity Password Manager is a secure password manager that gives enterprises control over password management, policies, and automated reset functions.`
templateman update 2023-10-14 11:27:55 +00:00			`remediation: Ensure proper access.`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00			`reference:`
			`- https://www.oneidentity.com/techbrief/security-guide-for-password-manager821177/`
Dashboard (#3693) * Enhancement: exposed-panels/oipm-detect.yaml by mp * Enhancement: exposed-panels/jenkins-login.yaml by mp * Enhancement: technologies/wuzhicms-detect.yaml by mp * Fix missing space for references, introduced in #3689 * Fix missing space for references, introduced in #3689 Correct non-standard characters Co-authored-by: sullo <sullo@cirt.net> 2022-02-11 16:44:15 +00:00			`classification:`
			`cwe-id: CWE-200`
Added max request counter of each template 2023-04-28 08:11:21 +00:00			`metadata:`
Add mass vendor and product info to templates 2024-02-22 00:55:04 +00:00			`vendor: oneidentity`
			`product: password_manager`
Added max request counter of each template 2023-04-28 08:11:21 +00:00			`max-request: 1`
templateman update 2023-10-14 11:27:55 +00:00			`tags: panel`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Added oipm-detect 2020-12-01 13:20:54 +00:00			`- method: GET`
			`path:`
			`- '{{BaseURL}}/PMUser/'`
templateman update 2023-10-14 11:27:55 +00:00
Added oipm-detect 2020-12-01 13:20:54 +00:00			`matchers:`
			`- type: word`
			`words:`
Dashboard (#3693) * Enhancement: exposed-panels/oipm-detect.yaml by mp * Enhancement: exposed-panels/jenkins-login.yaml by mp * Enhancement: technologies/wuzhicms-detect.yaml by mp * Fix missing space for references, introduced in #3689 * Fix missing space for references, introduced in #3689 Correct non-standard characters Co-authored-by: sullo <sullo@cirt.net> 2022-02-11 16:44:15 +00:00			`- "One Identity Password Manager"`
Auto Template Signing [Wed Feb 28 16:35:47 UTC 2024] :robot: 2024-02-28 16:35:47 +00:00			`# digest: 4a0a0047304502206da1796fa0c741fc1a74e0b72f452ae0ac19aea93882aedd97b1988b55de221e022100cbe3c2fbd350bc7ff8bd553f6d4f2c10110de0c3f1a023a3c7b08c5825ceabdd:922c64590222798bb761d5b6d8e72950`