nuclei-templates/misconfiguration/hadoop-unauth.yaml

26 lines
507 B
YAML

id: hadoop-unauth
info:
name: Apache Hadoop Unauth
author: pdteam
severity: low
tags: apache,hadoop,unauth
requests:
- method: GET
path:
- '{{BaseURL}}/ws/v1/cluster/info'
- '{{BaseURL}}/ws/v1/cluster/apps/new-application'
matchers-condition: or
matchers:
- type: word
words:
- 'hadoopVersion'
- 'resourceManagerVersionBuiltOn'
condition: and
- type: word
words:
- 'javax.ws.rs.WebApplicationException'