Adding springboot-detect-loggers

misconfiguration/springboot-detect/springboot-detect-configprops.yaml

@@ -3,7 +3,7 @@ id: springboot-detect-configprops
 info:
   name: Detect Springboot Configprops Actuator
   author: that_juan_ & dwisiswant0 & wdahlenb
-  severity: medium
+  severity: low
   description: Sensitive environment variables may not be masked
 
 requests:
@@ -27,5 +27,6 @@ requests:
         words:
           - "application/json"
           - "application/vnd.spring-boot.actuator"
+          - "application/vnd.spring-boot.actuator.v1+json"
         condition: or
         part: header

misconfiguration/springboot-detect/springboot-detect-env.yaml

@@ -28,5 +28,6 @@ requests:
         words:
           - "application/json"
           - "application/vnd.spring-boot.actuator"
+          - "application/vnd.spring-boot.actuator.v1+json"
         condition: or
         part: header

misconfiguration/springboot-detect/springboot-detect-heapdump.yaml

@@ -27,6 +27,7 @@ requests:
         words:
           - "application/octet-stream"
           - "application/vnd.spring-boot.actuator"
+          - "application/vnd.spring-boot.actuator.v1+json"
           - "hprof"
         condition: or
         part: header

misconfiguration/springboot-detect/springboot-detect-loggers.yaml

@@ -0,0 +1,33 @@
+id: springboot-detect-loggers
+
+info:
+  name: Detect Springboot Loggers
+  author: that_juan_ & dwisiswant0 & wdahlenb
+  severity: low
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/loggers"
+      - "{{BaseURL}}/actuator/loggers"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - '"loggers"'
+          - '"profiles":'
+        condition: or
+
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        words:
+          - "application/json"
+          - "application/vnd.spring-boot.actuator"
+          - "application/vnd.spring-boot.actuator.v1+json"
+        condition: or
+        part: header

misconfiguration/springboot-detect/springboot-detect-mappings.yaml

@@ -3,7 +3,7 @@ id: springboot-detect-mappings
 info:
   name: Detect Springboot Mappings Actuator
   author: that_juan_ & dwisiswant0 & wdahlenb
-  severity: medium
+  severity: low
   description: Additional routes may be displayed
 
 requests:
@@ -27,5 +27,6 @@ requests:
         words:
           - "application/json"
           - "application/vnd.spring-boot.actuator"
+          - "application/vnd.spring-boot.actuator.v1+json"
         condition: or
         part: header

misconfiguration/springboot-detect/springboot-detect-trace.yaml

@@ -3,7 +3,7 @@ id: springboot-detect-trace
 info:
   name: Detect Springboot Trace Actuator
   author: that_juan_ & dwisiswant0 & wdahlenb
-  severity: high
+  severity: low
   description: View recent HTTP requests and responses
 
 requests:
@@ -30,5 +30,6 @@ requests:
         words:
           - "application/json"
           - "application/vnd.spring-boot.actuator"
+          - "application/vnd.spring-boot.actuator.v1+json"
         condition: or
         part: header