diff --git a/http/cves/2020/CVE-2020-27838.yaml b/http/cves/2020/CVE-2020-27838.yaml
index 9d20ad4ad7..91127651bc 100644
--- a/http/cves/2020/CVE-2020-27838.yaml
+++ b/http/cves/2020/CVE-2020-27838.yaml
@@ -46,10 +46,9 @@ http:
 
     matchers-condition: and
     matchers:
-      - type: word
-        part: body
-        words:
-          - '"clientId":"security-admin-console"'
+      - type: regex
+        regex:
+          - '"clientId":\s*"security-admin-console"'
           - '"secret":'
         condition: and