From 8e112cd5dc8e3b48788555e6074cfe7da8ab81b5 Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Tue, 7 May 2024 18:47:55 +0530 Subject: [PATCH] minor update --- http/exposures/configs/ms-exchange-local-domain.yaml | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/http/exposures/configs/ms-exchange-local-domain.yaml b/http/exposures/configs/ms-exchange-local-domain.yaml index 8d1bc95f8a..7480a96b15 100644 --- a/http/exposures/configs/ms-exchange-local-domain.yaml +++ b/http/exposures/configs/ms-exchange-local-domain.yaml @@ -1,14 +1,14 @@ id: ms-exchange-local-domain info: - name: Microsoft Exchange Autodiscover - Local Domain + name: Microsoft Exchange Autodiscover - Local Domain Exposure author: userdehghani - severity: Medium + severity: medium + description: | + Microsoft Exchange is prone to a local domain exposure using the Autodiscover v2 endpoint. classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N cwe-id: CWE-200 - description: | - Microsoft Exchange is prone to a local domain exposure using the Autodiscover v2 endpoint. reference: - https://support.microsoft.com/en-gb/topic/autodiscover-v2-returns-internalurl-not-externalurls-in-other-site-774301e2-2d1e-d5e0-aa41-a49f6e9b06f4 metadata: @@ -22,7 +22,6 @@ http: path: - "{{BaseURL}}/autodiscover/autodiscover.json?Protocol=ActiveSync&Email=user@domain.tld&RedirectCount=1" - stop-at-first-match: true matchers-condition: and matchers: - type: regex