Merge pull request #10387 from NoelV11/main
Added Template to detect Exposed Instances of RLOS Cabinet Management…main
commit
75886b85f8
|
@ -0,0 +1,31 @@
|
||||||
|
id: manage-cabinet-register
|
||||||
|
|
||||||
|
info:
|
||||||
|
name: Manage Cabinet Register - Exposed
|
||||||
|
author: noel
|
||||||
|
severity: low
|
||||||
|
description: |
|
||||||
|
The path to the Cabinet Storage is omniapp/pages/cabinet/managecabinet.jsf?Action=1. If exposed, it gives an attacker insight into information such as Storage Volume Name, Cabinet Name, it's alias, Deployed AppServer IP Address and Port
|
||||||
|
reference:
|
||||||
|
- https://www.edms-consultants.com/newgen-rlos/
|
||||||
|
metadata:
|
||||||
|
verified: true
|
||||||
|
shodan-query: html:"omniapp"
|
||||||
|
max-request: 1
|
||||||
|
tags: misconfig,cabinet,exposure
|
||||||
|
|
||||||
|
http:
|
||||||
|
- method: GET
|
||||||
|
path:
|
||||||
|
- '{{BaseURL}}/omniapp/pages/cabinet/managecabinet.jsf?Action=1'
|
||||||
|
|
||||||
|
matchers-condition: and
|
||||||
|
matchers:
|
||||||
|
- type: word
|
||||||
|
part: body
|
||||||
|
words:
|
||||||
|
- 'Manage Cabinet [Register Cabinet]'
|
||||||
|
|
||||||
|
- type: status
|
||||||
|
status:
|
||||||
|
- 200
|
Loading…
Reference in New Issue