Delete http/default-logins/minio/minio-object-default-login.yaml

patch-15
Dhiyaneshwaran 2024-11-06 11:24:35 +05:30 committed by GitHub
parent e124478db2
commit 314f17d88b
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 0 additions and 55 deletions

View File

@ -1,55 +0,0 @@
id: minio-object-default-login
info:
name: MinIO Console Object Store - Default Login
author: johnk3r
severity: high
description: |
MinIO Console Object Store admin credentials were discovered.
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
cvss-score: 8.3
cwe-id: CWE-522
cpe: cpe:2.3:a:minio:minio:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 2
shodan-query: title:"MinIO Console"
product: minio
vendor: minio
tags: minio,default-login,object-store
variables:
username: minioadmin
password: minioadmin
http:
- raw:
- |
POST /api/v1/login HTTP/1.1
Host: {{Hostname}}
Content-Type: application/json
{"accessKey":"{{username}}","secretKey":"{{password}}"}
- |
GET /api/v1/session HTTP/1.1
Host: {{Hostname}}
matchers-condition: and
matchers:
- type: word
part: body
words:
- '"serverEndPoint":'
- '"ok"'
condition: and
- type: word
part: content_type
words:
- 'application/json'
- type: status
status:
- 200