Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Apollo Admin Service - Unauthenticated Access

By kannthu

Vidoc logoVidoc Module
Author: j4vaovo Classification CWE-ID: CWE-522 CVSS-Metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS-Score: 5.8 ApolloAdminservice was able to be accessed without authentication. Reference - Metadata max-request: 1 verified: true shodan-query: http.html:"apollo-adminservice"

Module preview

Concurrent Requests (1)
1. HTTP Request template
Matching conditions
word: appId, orgName, ownerName, dataChangeCre...and
word: application/jsonand
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability