One Identity Password Manager Detection
ID: oipm-detect
Severity: info
Author: nodauf
Tags: panel,oneidentity
Description
Section titled “Description”One Identity Password Manager is a secure password manager that gives enterprises control over password management, policies, and automated reset functions.
YAML Source
Section titled “YAML Source”id: oipm-detect
info: name: One Identity Password Manager Detection author: nodauf severity: info description: One Identity Password Manager is a secure password manager that gives enterprises control over password management, policies, and automated reset functions. remediation: Ensure proper access. reference: - https://www.oneidentity.com/techbrief/security-guide-for-password-manager821177/ classification: cwe-id: CWE-200 cpe: cpe:2.3:a:oneidentity:password_manager:*:*:*:*:*:*:*:* metadata: max-request: 1 vendor: oneidentity product: password_manager tags: panel,oneidentity
http: - method: GET path: - '{{BaseURL}}/PMUser/'
matchers: - type: word words: - "One Identity Password Manager"# digest: 4a0a004730450220348b7cef4a8d3a349956b4aeb764853edacefd718f59ce92669c17a4a3620a2802210086eb079377b384b5a03abafb20ca92ae2f62a49833eb0f78b560cd94b578edfd:922c64590222798bb761d5b6d8e72950Guide to check the vulnerabilities
Section titled “Guide to check the vulnerabilities”This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.
$ nuclei -u "URL" -t "http/exposed-panels/oipm-detect.yaml"