misc changes

misconfiguration/tensorflow-unauth.yaml

@@ -1,19 +0,0 @@
-id: tensorflow-unauth
-
-info:
-  name: Tensorflow Unauth
-  author: dhiyaneshDk
-  severity: high
-  tags: tensorflow,unauth
-  reference: https://www.tensorflow.org/guide/summaries_and_tensorboard?hl=zh-CN
-
-requests:
-  - method: GET
-    path:
-      - '{{BaseURL}}/data/plugins_listing'
-    matchers:
-      - type: word
-        words:
-          - 'tf-scalar-dashboard'
-          - 'loading_mechanism'
-        condition: and

misconfiguration/unauthenticated-tensorboard.yaml

@@ -0,0 +1,25 @@
+id: unauthenticated-tensorboard
+
+info:
+  name: Unauthenticated Tensorboard by Tensorflow
+  author: dhiyaneshDk
+  severity: high
+  tags: tensorflow,tensorboard,unauth
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/data/plugins_listing'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - 'scalars'
+          - 'loading_mechanism'
+          - 'custom_scalars'
+        condition: and
+
+      - type: status
+        status:
+          - 200