Skip to content

One Identity Password Manager Detection

ID: oipm-detect

Severity: info

Author: nodauf

Tags: panel,oneidentity

One Identity Password Manager is a secure password manager that gives enterprises control over password management, policies, and automated reset functions.

id: oipm-detect
info:
name: One Identity Password Manager Detection
author: nodauf
severity: info
description: One Identity Password Manager is a secure password manager that gives enterprises control over password management, policies, and automated reset functions.
remediation: Ensure proper access.
reference:
- https://www.oneidentity.com/techbrief/security-guide-for-password-manager821177/
classification:
cwe-id: CWE-200
cpe: cpe:2.3:a:oneidentity:password_manager:*:*:*:*:*:*:*:*
metadata:
max-request: 1
vendor: oneidentity
product: password_manager
tags: panel,oneidentity
http:
- method: GET
path:
- '{{BaseURL}}/PMUser/'
matchers:
- type: word
words:
- "One Identity Password Manager"
# digest: 4a0a004730450220348b7cef4a8d3a349956b4aeb764853edacefd718f59ce92669c17a4a3620a2802210086eb079377b384b5a03abafb20ca92ae2f62a49833eb0f78b560cd94b578edfd:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/exposed-panels/oipm-detect.yaml"

View on Github