cisco-ucm-uds-api-username-enumeration

Added a YAML nuclei file for 'Cisco Unified Call Manager (CUCM) User Data Services Username Enumeration API  - Unauthenticated'

exposures/apis/cisco-ucm-uds-api-username-enumeration

@@ -0,0 +1,34 @@
+id: cisco-ucm-uds-api-username-enumeration
+
+info:
+  name: Cisco Unified Call Manager (CUCM) User Data Services Username Enumeration API  - Unauthenticated
+  author: manasmbellani
+  severity: medium
+  reference:
+    - https://www.n00py.io/2022/01/unauthenticated-dumping-of-usernames-via-cisco-unified-call-manager-cucm/
+  tags: exposure,cisco,cucm
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/cucm-uds/users"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        words:
+          - '<userName>'
+          - '<lastName>'
+          - '<phoneNumber>'
+        condition: and
+
+      - type: dsl
+        dsl:
+          - contains(tolower(content_type), 'application/xml')
+          - contains(tolower(content_type), 'text/xml')
+        part: header
+        condition: or