From b86685be7b0b5d220a17a79a181f667611647cb3 Mon Sep 17 00:00:00 2001 From: MostInterestingBotInTheWorld <98333686+MostInterestingBotInTheWorld@users.noreply.github.com> Date: Sun, 5 Feb 2023 12:26:00 -0500 Subject: [PATCH] Enhancement: exposures/apis/couchbase-buckets-api.yaml by mp --- exposures/apis/couchbase-buckets-api.yaml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/exposures/apis/couchbase-buckets-api.yaml b/exposures/apis/couchbase-buckets-api.yaml index 37dba5b3ce..07efae68fe 100644 --- a/exposures/apis/couchbase-buckets-api.yaml +++ b/exposures/apis/couchbase-buckets-api.yaml @@ -1,9 +1,14 @@ id: couchbase-buckets-api info: - name: Couchbase Buckets REST API - Unauthenticated + name: Couchbase Buckets Unauthenticated REST API - Detect author: geeknik severity: info + description: Couchbase Buckets REST API without authentication was detected. + classification: + cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N + cvss-score: 5.3 + cwe-id: CWE-200 reference: - https://docs.couchbase.com/server/current/rest-api/rest-bucket-intro.html - https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-metricset-couchbase-bucket.html @@ -31,3 +36,5 @@ requests: part: header words: - 'application/json' + +# Enhanced by mp on 2023/02/05