diff --git a/misconfiguration/aem/aem-misc-admin.yaml b/misconfiguration/aem/aem-misc-admin.yaml index 2ad346ab03..79f9cc5e30 100644 --- a/misconfiguration/aem/aem-misc-admin.yaml +++ b/misconfiguration/aem/aem-misc-admin.yaml @@ -1,7 +1,7 @@ id: aem-misc-admin info: - name: Adobe AEM Misc Admin Exposure + name: Adobe AEM Misc Admin Dashboard Exposure author: dhiyaneshDk severity: high reference: @@ -11,12 +11,13 @@ info: shodan-query: - http.title:"AEM Sign In" - http.component:"Adobe Experience Manager" - tags: aem,adobe,exposure + tags: misconfig,aem,adobe,exposure requests: - method: GET path: - "{{BaseURL}}/miscadmin" + - "{{BaseURL}}/mcmadmin#/content/dashboard" - "{{BaseURL}}/miscadmin#/etc/mobile" - "{{BaseURL}}/miscadmin#/etc/segmentation" - "{{BaseURL}}/miscadmin#/etc/blueprints" @@ -32,7 +33,8 @@ requests: part: body words: - 'AEM Tools' - condition: and + - 'AEM MCM' + condition: or - type: word part: header