updated metadata

patch-1
Dhiyaneshwaran 2023-08-19 10:55:59 +05:30 committed by GitHub
parent 752d4ed2ec
commit efc7f6b021
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 8 deletions

View File

@ -4,17 +4,15 @@ info:
name: RedisInsight - Unauthenticated Access
author: ggranjus
severity: high
description: RedisInsight was able to be accessed because no authentication was required.
reference: https://redis.com/redis-enterprise/redis-insight/
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0.0
cwe-id: CWE-200
description: |
RedisInsight was able to be accessed because no authentication was required.
reference:
- https://redis.com/redis-enterprise/redis-insight/
metadata:
verified: 'true'
shodan-query: http.title:RedisInsight
shodan-query: title:"RedisInsight"
max-request: 1
tags: redis,redisinsight,unauth
tags: redis,redisinsight,unauth,misconfig
http:
- method: GET
@ -26,6 +24,7 @@ http:
- type: word
words:
- "<title>RedisInsight</title>"
- type: status
status:
- 200