id: unauthenticated-jenkins

info:
  name: Unauthenticated Jenkins Dashboard
  author: dhiyaneshDK
  severity: high
  description: Jenkins Dashboard is exposed to external users.
  metadata:
    max-request: 1
  tags: jenkins

http:
  - method: GET
    path:
      - "{{BaseURL}}"
      - "{{BaseURL}}/jenkins/"

    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: word
        words:
          - Dashboard [Jenkins]
        condition: and

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100cef11be2e4fc4d5fe925f91269917b5763805635e48d3ae6c5ead57dbe56d9e0022100e2b91fe6026d44a02b15e34655c58d3a95cb070db314386bbb568a1f1b05ace3:922c64590222798bb761d5b6d8e72950