manage-cabinet-register: Manage Cabinet Register - Exposed

id: manage-cabinet-register

info:
  name: Manage Cabinet Register - Exposed
  author: noel
  severity: low
  description: |
   The path to the Cabinet Storage is omniapp/pages/cabinet/managecabinet.jsf?Action=1. If exposed, it gives an attacker insight into information such as Storage Volume Name, Cabinet Name, it's alias, Deployed AppServer IP Address and Port
  reference:
    - https://www.edms-consultants.com/newgen-rlos/
  metadata:
    verified: true
    shodan-query: html:"omniapp"
    max-request: 1
  tags: misconfig,cabinet,exposure,vuln

http:
  - method: GET
    path:
      - '{{BaseURL}}/omniapp/pages/cabinet/managecabinet.jsf?Action=1'

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'Manage Cabinet [Register Cabinet]'

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100d89d4f1255e0bff102551c35df7a80f046565ddd8801fe1076a1cbf92716f3b4022100bc3966f064ae692d239dba86f54909f99a8343e64ad2e73b6408c1f164b3c5b4:922c64590222798bb761d5b6d8e72950