id: portainer-init-deploy info: name: Portainer - Init Deploy Discovery author: princechaddha severity: medium description: Portainer initialization deployment files were discovered. classification: cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N cvss-score: 5.3 cwe-id: CWE-200 reference: - https://documentation.portainer.io/v2.0/deploy/initial/ tags: portainer,exposure,docker,devops,panel,disclosure requests: - method: GET path: - "{{BaseURL}}/api/users/admin/check" matchers-condition: and matchers: - type: word words: - "No administrator account found inside the database" - type: word words: - "application/json" part: header - type: status status: - 404 # Enhanced by mp on 2022/07/15