Skip to content
Nuclei Templates

Manage Cabinet Register - Exposed

ID: manage-cabinet-register

Severity: low

Author: noel

Tags: misconfig,cabinet,exposure

Description

Section titled “Description”

The path to the Cabinet Storage is omniapp/pages/cabinet/managecabinet.jsf?Action=1. If exposed, it gives an attacker insight into information such as Storage Volume Name, Cabinet Name, it’s alias, Deployed AppServer IP Address and Port

YAML Source

Section titled “YAML Source”
id: manage-cabinet-register


info:
  name: Manage Cabinet Register - Exposed
  author: noel
  severity: low
  description: |
   The path to the Cabinet Storage is omniapp/pages/cabinet/managecabinet.jsf?Action=1. If exposed, it gives an attacker insight into information such as Storage Volume Name, Cabinet Name, it's alias, Deployed AppServer IP Address and Port
  reference:
    - https://www.edms-consultants.com/newgen-rlos/
  metadata:
    verified: true
    shodan-query: html:"omniapp"
    max-request: 1
  tags: misconfig,cabinet,exposure


http:
  - method: GET
    path:
      - '{{BaseURL}}/omniapp/pages/cabinet/managecabinet.jsf?Action=1'


    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'Manage Cabinet [Register Cabinet]'


      - type: status
        status:
          - 200
# digest: 490a004630440220531899b9336774ecde4b222bbfb1548392100ae9ea6da4d7b3038866d49eacaa02203e438ee9d088176ed33a5af8fce07eb14def05c0be2e018aff0fbb40bc2471be:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/misconfiguration/manage-cabinet-register.yaml"

View on Github