2020-12-01 13:20:54 +00:00
id : oipm-detect
2022-04-22 10:38:41 +00:00
2020-12-01 13:20:54 +00:00
info :
2022-02-11 16:44:15 +00:00
name : One Identity Password Manager Detection
2020-12-01 13:20:54 +00:00
author : nodauf
severity : info
2022-04-22 10:38:41 +00:00
description : One Identity Password Manager is a secure password manager that gives enterprises control over password management, policies, and automated reset functions.
reference :
- https://www.oneidentity.com/techbrief/security-guide-for-password-manager821177/
2024-03-26 08:03:04 +00:00
remediation : Ensure proper access.
2022-02-11 16:44:15 +00:00
classification :
cwe-id : CWE-200
2024-03-26 08:03:04 +00:00
cpe : cpe:2.3:a:oneidentity:password_manager:*:*:*:*:*:*:*:*
2023-04-28 08:11:21 +00:00
metadata :
2024-03-23 09:28:19 +00:00
max-request : 1
2024-02-22 00:55:04 +00:00
product : password_manager
2024-03-26 08:03:04 +00:00
vendor : oneidentity
tags : panel,oneidentity
2022-04-22 10:38:41 +00:00
2023-04-27 04:28:59 +00:00
http :
2020-12-01 13:20:54 +00:00
- method : GET
path :
- '{{BaseURL}}/PMUser/'
2023-10-14 11:27:55 +00:00
2020-12-01 13:20:54 +00:00
matchers :
- type : word
words :
2022-02-11 16:44:15 +00:00
- "One Identity Password Manager"
2024-03-26 08:03:04 +00:00
# digest: 4a0a0047304502210087a5c5b42cf428ae2b3fbf83bfd580d19a70031ca2d94136dabdc2b414fcac5d022041d86dd5edb6955117e2e5a0b0e23854b1a3e12ef4d768f3b3188690aa6fc75b:922c64590222798bb761d5b6d8e72950