From 064f084dee9e8cf7f5705980e4a9ed629327d483 Mon Sep 17 00:00:00 2001
From: PD-Team <8293321+bauthard@users.noreply.github.com>
Date: Fri, 29 Jan 2021 23:53:50 +0530
Subject: [PATCH] misc changes
---
cves/2020/CVE-2020-9496.yaml | 15 ---------------
exposed-panels/sonarqube-login.yaml | 3 ---
.../{docker-api.yaml => exposed-docker-api.yaml} | 2 --
3 files changed, 20 deletions(-)
rename misconfiguration/{docker-api.yaml => exposed-docker-api.yaml} (83%)
diff --git a/cves/2020/CVE-2020-9496.yaml b/cves/2020/CVE-2020-9496.yaml
index 6949fb8abc..aa0d736519 100644
--- a/cves/2020/CVE-2020-9496.yaml
+++ b/cves/2020/CVE-2020-9496.yaml
@@ -24,21 +24,6 @@ requests:
ProjectDiscoverydwisiswant0
- - |
- POST /webtools/control/xmlrpc HTTP/1.1
- Host: {{Hostname}}:8080
- Origin: http://{{Hostname}}:8080
- Content-Type: application/xml
-
- ProjectDiscoverydwisiswant0
-
- - |
- POST /webtools/control/xmlrpc HTTP/1.1
- Host: {{Hostname}}:8443
- Origin: https://{{Hostname}}:8443
- Content-Type: application/xml
-
- ProjectDiscoverydwisiswant0
matchers-condition: and
matchers:
- type: word
diff --git a/exposed-panels/sonarqube-login.yaml b/exposed-panels/sonarqube-login.yaml
index fff8652ed9..320e3089ce 100644
--- a/exposed-panels/sonarqube-login.yaml
+++ b/exposed-panels/sonarqube-login.yaml
@@ -9,9 +9,6 @@ requests:
- method: GET
path:
- "{{BaseURL}}/sessions/new"
- - "{{BaseURL}}:9000/sessions/new"
- - "{{BaseURL}}:8080/sessions/new"
- - "{{BaseURL}}:9090/sessions/new"
matchers:
- type: word
diff --git a/misconfiguration/docker-api.yaml b/misconfiguration/exposed-docker-api.yaml
similarity index 83%
rename from misconfiguration/docker-api.yaml
rename to misconfiguration/exposed-docker-api.yaml
index 26c583e0da..91c0c5e10b 100644
--- a/misconfiguration/docker-api.yaml
+++ b/misconfiguration/exposed-docker-api.yaml
@@ -9,9 +9,7 @@ requests:
- method: GET
path:
- "http://{{Hostname}}/version"
- - "http://{{Hostname}}:2376/version"
- "http://{{Hostname}}/v1.24/version"
- - "http://{{Hostname}}:2376/v1.24/version"
matchers-condition: and
matchers: