id: tidb-native-password

info:
  name: TiDB DB with enabled native password
  author: lu4nx
  severity: info
  description: TiDB is fully compatible with the MySQL 5.7 protocol and the common features and syntax of MySQL 5.7. TiDB instance with enabled native password support prone vulnerable for password brute-force attack.
  tags: network,tidb,bruteforce,db

network:
  - host:
      - "{{Hostname}}"
      - "{{Hostname}}:4000"

    matchers:
      - type: word
        words:
          - "mysql_native_password"
          - "TiDB"
        condition: and