diff --git a/http/misconfiguration/oracle-ebs-registration-enabled.yaml b/http/misconfiguration/oracle-ebs-registration-enabled.yaml new file mode 100644 index 00000000000..4831ff375cb --- /dev/null +++ b/http/misconfiguration/oracle-ebs-registration-enabled.yaml @@ -0,0 +1,35 @@ +id: oracle-ebs-registration-enabled + +info: + name: Oracle EBS - Registration Enabled + author: theamanrawat + severity: info + description: | + Detected if the User Management (UMX) Self-Service Registration page is accessible in Oracle E-Business Suite. This feature allows external users to create accounts, which may not be desirable for all deployments. + reference: + - https://docs.oracle.com/cd/E18727_01/doc.121/e12843/T156458T156461.htm + metadata: + shodan-query: html:"OA_HTML" + fofa-query: body="OA_HTML" + tags: oracle,ebs,registration,exposure + +http: + - method: GET + path: + - "{{BaseURL}}/OA_HTML/OA.jsp?page=/oracle/apps/fnd/umx/login/webui/NewUserRegPG" + - "{{BaseURL}}/OA_HTML/ibeCAcpSSOReg.jsp" + + stop-at-first-match: true + matchers-condition: and + matchers: + - type: word + part: body + words: + - "Register" + - "OA_HTML/loadCSRFGuard" + - "OA_MEDIA" + condition: and + + - type: status + status: + - 200