From 891e8374b1a97d5e70c3c9d2611d2381f3ae6f97 Mon Sep 17 00:00:00 2001 From: sandeep <8293321+ehsandeep@users.noreply.github.com> Date: Mon, 14 Jun 2021 20:32:21 +0530 Subject: [PATCH] misc changes --- exposed-panels/adobe-connect-central-login.yaml | 2 +- .../adobe/adobe-connect-username-exposure.yaml | 4 +++- misconfiguration/adobe/adobe-connect-version.yaml | 9 +++++++-- 3 files changed, 11 insertions(+), 4 deletions(-) diff --git a/exposed-panels/adobe-connect-central-login.yaml b/exposed-panels/adobe-connect-central-login.yaml index 3a8534a527..1218c9f8d7 100644 --- a/exposed-panels/adobe-connect-central-login.yaml +++ b/exposed-panels/adobe-connect-central-login.yaml @@ -4,7 +4,7 @@ info: name: Adobe Connect Central Login author: dhiyaneshDk severity: info - tags: adobe,user,panel + tags: adobe,panel requests: - method: GET diff --git a/misconfiguration/adobe/adobe-connect-username-exposure.yaml b/misconfiguration/adobe/adobe-connect-username-exposure.yaml index 206bff4ecc..088b39ad5e 100644 --- a/misconfiguration/adobe/adobe-connect-username-exposure.yaml +++ b/misconfiguration/adobe/adobe-connect-username-exposure.yaml @@ -5,7 +5,7 @@ info: reference: https://packetstormsecurity.com/files/161345/Adobe-Connect-10-Username-Disclosure.html author: dhiyaneshDk severity: low - tags: adobe,user + tags: adobe,disclosure requests: - method: GET @@ -17,7 +17,9 @@ requests: - type: word words: - 'Administrators name:' + - 'Support Administrators email address:' part: body + condition: and - type: status status: diff --git a/misconfiguration/adobe/adobe-connect-version.yaml b/misconfiguration/adobe/adobe-connect-version.yaml index 20a2a2ac3d..6dab2e7f2e 100644 --- a/misconfiguration/adobe/adobe-connect-version.yaml +++ b/misconfiguration/adobe/adobe-connect-version.yaml @@ -4,7 +4,7 @@ info: name: Adobe Connect Central Version author: dhiyaneshDk severity: info - tags: adobe,user,version + tags: adobe requests: - method: GET @@ -15,9 +15,14 @@ requests: matchers: - type: word words: - - 'package' + - 'package=' part: body + - type: word + words: + - 'text/plain' + part: header + - type: status status: - 200