ZAP Scan Baseline Report

[github-actions[bot]]

• Site: https://www2.deloitte.com New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 12:
    • https://www2.deloitte.com/us/en/insights/deloitte-insights-magazine.html?icid=wn_deloitte-insights-magazine
    • https://www2.deloitte.com/us/en/pages/consulting/solutions/cloud-consulting-services.html?icid=top_cloud-consulting-services
    • https://www2.deloitte.com/us/en/pages/consulting/solutions/enterprise-metaverse-consulting.html?icid=wn_enterprise-metaverse-consulting
    • https://www2.deloitte.com/us/en/pages/energy-and-resources/articles/mining-and-metals.html?icid=top_mining-and-metals
    • https://www2.deloitte.com/us/en/pages/energy-and-resources/articles/mining-and-metals.html?icid=top_mining-and-metals
    • ..
  • CSP: Wildcard Directive [10055] total: 4:
    • https://www2.deloitte.com/ac/
    • https://www2.deloitte.com/cis/
    • https://www2.deloitte.com/globalblueprint/
    • https://www2.deloitte.com/sitemap.xml
  • CSP: script-src unsafe-inline [10055] total: 4:
    • https://www2.deloitte.com/ac/
    • https://www2.deloitte.com/cis/
    • https://www2.deloitte.com/globalblueprint/
    • https://www2.deloitte.com/sitemap.xml
  • CSP: style-src unsafe-inline [10055] total: 4:
    • https://www2.deloitte.com/ac/
    • https://www2.deloitte.com/cis/
    • https://www2.deloitte.com/globalblueprint/
    • https://www2.deloitte.com/sitemap.xml
  • Sub Resource Integrity Attribute Missing [90003] total: 12:
    • https://www2.deloitte.com
    • https://www2.deloitte.com
    • https://www2.deloitte.com/cn/en/pages/strategy-operations/articles/5g-assist-in-2019-ncov.html
    • https://www2.deloitte.com/cn/en/pages/strategy-operations/articles/5g-assist-in-2019-ncov.html
    • https://www2.deloitte.com/content/dam/Deloitte/cn/Documents/strategy/deloitte-cn-consulting-5g-assist-in-2019-ncov-en-200317.pdf
    • ..
  • Big Redirect Detected (Potential Sensitive Information Leak) [10044] total: 1:
    • https://www2.deloitte.com/xd/en.html
  • Cookie Without Secure Flag [10011] total: 2:
    • https://www2.deloitte.com/globalblueprint/
    • https://www2.deloitte.com/sitemap.xml
  • Cookie without SameSite Attribute [10054] total: 2:
    • https://www2.deloitte.com/globalblueprint/
    • https://www2.deloitte.com/sitemap.xml
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 12:
    • https://www2.deloitte.com
    • https://www2.deloitte.com
    • https://www2.deloitte.com/cn/en/pages/strategy-operations/articles/5g-assist-in-2019-ncov.html
    • https://www2.deloitte.com/cn/en/pages/strategy-operations/articles/5g-assist-in-2019-ncov.html
    • https://www2.deloitte.com/content/dam/Deloitte/cn/Documents/strategy/deloitte-cn-consulting-5g-assist-in-2019-ncov-en-200317.pdf
    • ..
  • Permissions Policy Header Not Set [10063] total: 12:
    • https://www2.deloitte.com
    • https://www2.deloitte.com/ac/
    • https://www2.deloitte.com/cn/en/pages/strategy-operations/articles/5g-assist-in-2019-ncov.html
    • https://www2.deloitte.com/content/dam/Deloitte/cn/Documents/strategy/deloitte-cn-consulting-5g-assist-in-2019-ncov-en-200317.pdf
    • https://www2.deloitte.com/sitemap.xml
    • ..
  • Timestamp Disclosure - Unix [10096] total: 11:
    • https://www2.deloitte.com
    • https://www2.deloitte.com/ac/
    • https://www2.deloitte.com/us/en.html
    • https://www2.deloitte.com/us/en/pages/consulting/solutions/enterprise-metaverse-consulting.html?icid=wn_enterprise-metaverse-consulting
    • https://www2.deloitte.com/us/en/pages/tax/articles/operations-transformation.html?icid=top_operations-transformation
    • ..
  • Base64 Disclosure [10094] total: 12:
    • https://www2.deloitte.com
    • https://www2.deloitte.com/cn/en/pages/strategy-operations/articles/5g-assist-in-2019-ncov.html
    • https://www2.deloitte.com/content/dam/Deloitte/cn/Documents/strategy/deloitte-cn-consulting-5g-assist-in-2019-ncov-en-200317.pdf
    • https://www2.deloitte.com/robots.txt
    • https://www2.deloitte.com/us/en.html
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 16:
    • https://www2.deloitte.com/us/en/pages/consulting/solutions/enterprise-metaverse-consulting.html?icid=wn_enterprise-metaverse-consulting
    • https://www2.deloitte.com/us/en/pages/consulting/solutions/enterprise-metaverse-consulting.html?icid=wn_enterprise-metaverse-consulting
    • https://www2.deloitte.com/us/en/pages/tax/articles/operations-transformation.html?icid=top_operations-transformation
    • https://www2.deloitte.com/us/en/pages/tax/articles/operations-transformation.html?icid=top_operations-transformation
    • https://www2.deloitte.com/us/en/services/tax.html?icid=top_tax
    • ..
  • Modern Web Application [10109] total: 12:
    • https://www2.deloitte.com
    • https://www2.deloitte.com/cn/en/pages/strategy-operations/articles/5g-assist-in-2019-ncov.html
    • https://www2.deloitte.com/content/dam/Deloitte/cn/Documents/strategy/deloitte-cn-consulting-5g-assist-in-2019-ncov-en-200317.pdf
    • https://www2.deloitte.com/us/en.html
    • https://www2.deloitte.com/us/en/pages/consulting/solutions/enterprise-metaverse-consulting.html?icid=wn_enterprise-metaverse-consulting
    • ..
  • Non-Storable Content [10049] total: 1:
    • https://www2.deloitte.com/sitemap.xml
  • Re-examine Cache-control Directives [10015] total: 12:
    • https://www2.deloitte.com
    • https://www2.deloitte.com/robots.txt
    • https://www2.deloitte.com/us/en.html
    • https://www2.deloitte.com/us/en/pages/consulting/solutions/enterprise-metaverse-consulting.html?icid=wn_enterprise-metaverse-consulting
    • https://www2.deloitte.com/us/en/pages/tax/articles/operations-transformation.html?icid=top_operations-transformation
    • ..
  • Storable and Cacheable Content [10049] total: 2:
    • https://www2.deloitte.com/globalblueprint/
    • https://www2.deloitte.com/robots.txt
  • Storable but Non-Cacheable Content [10049] total: 9:
    • https://www2.deloitte.com
    • https://www2.deloitte.com/ac/
    • https://www2.deloitte.com/kg/en/
    • https://www2.deloitte.com/kg/ru/
    • https://www2.deloitte.com/tj/en/
    • ..

View the following link to download the report. RunnerID:4978433295

[github-actions[bot]]

• Site: https://www2.deloitte.com New Alerts
  • Cross-Domain Misconfiguration [10098] total: 12:
    • https://www2.deloitte.com/content/dam/Deloitte/resources/js/CrossDomainConsentShare.js
    • https://www2.deloitte.com/content/dam/Deloitte/resources/static-fixes/legacy-static-fix.css
    • https://www2.deloitte.com/content/dam/resources/deloitte/icons/apple-icon-114x114.png
    • https://www2.deloitte.com/content/dam/resources/deloitte/icons/apple-icon-144x144.png
    • https://www2.deloitte.com/content/dam/resources/deloitte/icons/apple-icon-57x57.png
    • ..
  • Source Code Disclosure - SQL [10099] total: 1:
    • https://www2.deloitte.com/us/en/footerlinks/global-office-directory.html?icid=bottom_global-office-directory
  • Vulnerable JS Library [10003] total: 5:
    • https://www2.deloitte.com/apps/shared/clientlibs/dcom-main/clientlibs-jquery.lc-676f843463ac676e1918c97ea7dc1a20-lc.min.js
    • https://www2.deloitte.com/content/dam/html/global/fluid-branded/current-release/js/handlebars-v4.0.11.js
    • https://www2.deloitte.com/etc.clientlibs/shared/clientlibs/clientlib-global/clientlib-base.lc-bc16e5d618137515e37a2ea61174ca8d-lc.min.js
    • https://www2.deloitte.com/etc/designs/dcom/dcom-main-footer.lc-2cdd1f82240a00680eabff888a87230a-lc.min.js
    • https://www2.deloitte.com/etc/designs/dcom/dcom-main/clientlibs-jquery.lc-676f843463ac676e1918c97ea7dc1a20-lc.min.js
  • Dangerous JS Functions [10110] total: 8:
    • https://www2.deloitte.com/apps/shared/clientlibs/dcom-main/clientlibs-jquery.lc-676f843463ac676e1918c97ea7dc1a20-lc.min.js
    • https://www2.deloitte.com/content/dam/html/global/fluid-branded/current-release/js/jquery.fluidbrandedcarousel.js
    • https://www2.deloitte.com/etc.clientlibs/clientlibs/granite/utils.lc-a21d361818b30206df3d6bb4e9432229-lc.min.js
    • https://www2.deloitte.com/etc.clientlibs/foundation/clientlibs/shared.lc-e9d9a3990d7779c2e8e3361187f3d36b-lc.min.js
    • https://www2.deloitte.com/etc.clientlibs/shared/clientlibs/clientlib-global/clientlib-base.lc-bc16e5d618137515e37a2ea61174ca8d-lc.min.js
    • ..

View the following link to download the report. RunnerID:4979103367

[github-actions[bot]]

• Site: https://www2.deloitte.com Resolved Alerts
  • Vulnerable JS Library [10003] total: 5:
  • Dangerous JS Functions [10110] total: 8:

View the following link to download the report. RunnerID:4979162222

[github-actions[bot]]

• Site: https://www2.deloitte.com New Alerts
  • Vulnerable JS Library [10003] total: 3:
    • https://www2.deloitte.com/apps/shared/clientlibs/dcom-main/clientlibs-jquery.lc-676f843463ac676e1918c97ea7dc1a20-lc.min.js
    • https://www2.deloitte.com/etc/designs/dcom/dcom-main-footer.lc-2cdd1f82240a00680eabff888a87230a-lc.min.js
    • https://www2.deloitte.com/etc/designs/dcom/dcom-main/clientlibs-jquery.lc-676f843463ac676e1918c97ea7dc1a20-lc.min.js
  • Dangerous JS Functions [10110] total: 6:
    • https://www2.deloitte.com/apps/shared/clientlibs/dcom-main/clientlibs-jquery.lc-676f843463ac676e1918c97ea7dc1a20-lc.min.js
    • https://www2.deloitte.com/etc.clientlibs/clientlibs/granite/utils.lc-a21d361818b30206df3d6bb4e9432229-lc.min.js
    • https://www2.deloitte.com/etc.clientlibs/foundation/clientlibs/shared.lc-e9d9a3990d7779c2e8e3361187f3d36b-lc.min.js
    • https://www2.deloitte.com/etc.clientlibs/shared/clientlibs/dcom-main.lc-d882e7ce09d56b30b56ca7a9b73c1518-lc.min.js
    • https://www2.deloitte.com/etc/designs/dcom/dcom-main-footer.lc-2cdd1f82240a00680eabff888a87230a-lc.min.js
    • ..

View the following link to download the report. RunnerID:4979174025

[github-actions[bot]]

• Site: https://www2.deloitte.com Resolved Alerts
  • Cross-Domain Misconfiguration [10098] total: 12:
  • Source Code Disclosure - SQL [10099] total: 1:
  • Vulnerable JS Library [10003] total: 3:
  • Dangerous JS Functions [10110] total: 6:

View the following link to download the report. RunnerID:4989835080