id: unauthenticated-zipkin info: name: Zipkin Discovery author: dhiyaneshDk severity: high description: Unauthenticated access to Zipkin was discovered. reference: - https://zipkin.io/ tags: unauth metadata: max-request: 1 http: - method: GET path: - "{{BaseURL}}/config.json" matchers-condition: and matchers: - type: status status: - 200 - type: word words: - 'application/json' part: header - type: word words: - environment - defaultLookback part: body condition: and # Enhanced by mp on 2022/04/06