adding matchers-condition

when we are looking to match two condition, we should add matchers-condition, as the default check is OR which will results into false positive results.
patch-1
bauthard 2020-07-07 11:56:01 +05:30
parent 76745f7dcb
commit 5cfdcf0064
1 changed files with 2 additions and 1 deletions

View File

@ -4,13 +4,14 @@ info:
name: Zabbix Authentication Bypass
author: Harsh Bothra
severity: Critical
# source:- https://nvd.nist.gov/vuln/detail/CVE-2019-17382
# source:- https://nvd.nist.gov/vuln/detail/CVE-2019-17382
requests:
- method: GET
path:
- '{{BaseURL}}/zabbix.php?action=dashboard.view&dashboardid=1'
matchers-condition: and
matchers:
- type: status
status: