template fixes (#7523)
parent
c40a6cae15
commit
4c81209cce
|
@ -3,7 +3,7 @@ id: odoo-database-manager
|
|||
info:
|
||||
name: Odoo - Database Manager Discovery
|
||||
author: __Fazal,R3dg33k
|
||||
severity: critical
|
||||
severity: low
|
||||
description: Odoo database manager was discovered.
|
||||
metadata:
|
||||
max-request: 1
|
||||
|
@ -26,6 +26,4 @@ http:
|
|||
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/15
|
||||
- 200
|
|
@ -0,0 +1,30 @@
|
|||
id: odoo-unprotected-database
|
||||
|
||||
info:
|
||||
name: Odoo - Unprotected Database
|
||||
author: pdteam
|
||||
severity: critical
|
||||
description: |
|
||||
The system has an Odoo application whose database manager is unprotected, indicating potential unauthorized access.
|
||||
remediation: |
|
||||
Implement and enforce proper authentication and access control measures to protect the Odoo database manager.
|
||||
metadata:
|
||||
max-request: 1
|
||||
verified: true
|
||||
shodan-query: title:"Odoo"
|
||||
tags: odoo,database,unauth
|
||||
|
||||
http:
|
||||
- method: GET
|
||||
path:
|
||||
- '{{BaseURL}}/web/database/manager'
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
words:
|
||||
- "Warning, your Odoo database manager is not protected."
|
||||
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
Loading…
Reference in New Issue