Cakephp Configuration File Disclosure

What is the "Cakephp Configuration File Disclosure?"

The "Cakephp Configuration File Disclosure" module is designed to detect a misconfiguration vulnerability in Cakephp applications. Cakephp is a popular PHP framework used for developing web applications. This module specifically targets the exposure of sensitive configuration files, such as phinx.yml and phinx.yaml, which may contain important information like host, name, and password.

This module has a medium severity level, indicating that if exploited, it could potentially lead to unauthorized access or exposure of sensitive data.

Impact

If the Cakephp configuration files are exposed, an attacker could gain access to sensitive information, such as database credentials, API keys, or other configuration settings. This could lead to unauthorized access, data breaches, or other security incidents.

How the module works?

The module works by sending HTTP requests to specific paths, namely "/phinx.yml" and "/phinx.yaml", commonly used for storing Cakephp configuration files. It then applies matching conditions to determine if the files contain sensitive information and if the server responds with a 200 status code.

The matching conditions include checking for specific keywords like "host:", "name:", and "pass:" within the response body. If these keywords are found and the response status code is 200, the module flags the vulnerability as detected.

Here is an example of an HTTP request sent by the module:

GET /phinx.yml

The module expects the response to contain the specified keywords and a 200 status code to confirm the presence of the misconfiguration vulnerability.