nuclei-templates/http/exposed-panels/bigip-rest-panel.yaml

39 lines
1.2 KiB
YAML

id: bigip-icontrol-rest
info:
name: F5 BIG-IP iControl REST Panel - Detect
author: MrCl0wnLab
severity: info
description: |
F5 BIG-IP iControl REST API discovered and may be vulnerable to an authentication bypass (not tested).
reference:
- https://nvd.nist.gov/vuln/detail/CVE-2022-1388
- https://support.f5.com/csp/article/K23605346
- https://clouddocs.f5.com/products/big-iq/mgmt-api/v5.4/ApiReferences/bigiq_api_ref/r_auth_login.html
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0
cwe-id: CWE-200
metadata:
vendor: f5
product: big-ip_access_policy_manager
max-request: 1
shodan-query: http.title:"BIG-IP®-+Redirect" +"Server"
tags: panel,bigip,f5
http:
- method: GET
path:
- "{{BaseURL}}/mgmt/shared/authn/login"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "resterrorresponse"
- type: status
status:
- 401
# digest: 4b0a004830460221008aa6e79aa6b3c079500c2dfaa9834721668209393a6ed5ef4d7c8da057fc35700221008339477172abe75a9531d66d29a51c1a9349e42329d27148e43fc0569964a6d6:922c64590222798bb761d5b6d8e72950