diff --git a/misconfiguration/unauth-netdata.yaml b/misconfiguration/unauth-netdata.yaml index 9dd7e429ca..3d4e821fa9 100644 --- a/misconfiguration/unauth-netdata.yaml +++ b/misconfiguration/unauth-netdata.yaml @@ -4,24 +4,26 @@ info: author: dhiyaneshDk severity: medium reference: https://github.com/netdata/netdata - tags: netdata,unauth + tags: netdata,unauth,misconfig requests: - method: GET path: - "{{BaseURL}}/api/v1/data?chart=system.cpu&format=json&points=125&group=average>ime=0&options=ms%7Cflip%7Cjsonwrap%7Cnonzero&after=-120&dimensions=iowait" + matchers-condition: and matchers: - type: status status: - 200 + - type: word words: - "view_update_every" - "dimensions" - part: body + condition: and + - type: word words: - "application/json" - part: header - condition: and + part: header \ No newline at end of file