Files
nuclei-templates/http/misconfiguration/apache/apache-zeppelin-unauth.yaml
Prince Chaddha ea7a5969c8 Revert "chore: update TemplateMan 🤖"
This reverts commit c31d574176.
2025-05-27 10:39:47 +08:00

47 lines
1.2 KiB
YAML

id: apache-zeppelin-unauth
info:
name: Apache Zeppelin - Unauthenticated Access
author: j4vaovo
severity: high
description: |
Apache Zeppelin server was able to be accessed because no authentication was required.
reference: |
- https://www.adminxe.com/2172.html
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
cvss-score: 8.6
cwe-id: CWE-285
cpe: cpe:2.3:a:apache:zeppelin:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
shodan-query: title:"Zeppelin"
fofa-query: title="Zeppelin"
product: zeppelin
vendor: apache
tags: misconfig,apache,zeppelin,unauth
http:
- method: GET
path:
- "{{BaseURL}}/api/security/ticket"
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'status":"OK'
- '"ticket":"anonymous"'
condition: and
- type: word
part: header
words:
- 'application/json'
- type: status
status:
- 200
# digest: 4a0a00473045022100d295286861402b4bfe14aba5e99bcfb4d3fd6d1357aa31f81ca859726e518e9202201c39035861d3bdc8c8bba0055c398c6c5f6b5e45eba1824ab12066aa6902e755:922c64590222798bb761d5b6d8e72950