Facilities Mgmt API ZAP Scan

[github-actions[bot]]

• Site: https://api-easey-dev.app.cloud.gov New Alerts
  • Proxy Disclosure [40025] total: 6:
    • https://api-easey-dev.app.cloud.gov
    • https://api-easey-dev.app.cloud.gov/
    • https://api-easey-dev.app.cloud.gov/facilities-mgmt
    • https://api-easey-dev.app.cloud.gov/facilities-mgmt/swagger-json
    • https://api-easey-dev.app.cloud.gov/robots.txt
    • ..
  • Base64 Disclosure [10094] total: 1:
    • https://api-easey-dev.app.cloud.gov/facilities-mgmt/swagger-json
  • CORS Header [40040] total: 2:
    • https://api-easey-dev.app.cloud.gov/facilities-mgmt
    • https://api-easey-dev.app.cloud.gov/facilities-mgmt/swagger-json
  • Non-Storable Content [10049] total: 4:
    • https://api-easey-dev.app.cloud.gov/
    • https://api-easey-dev.app.cloud.gov/facilities-mgmt/swagger-json
    • https://api-easey-dev.app.cloud.gov/robots.txt
    • https://api-easey-dev.app.cloud.gov/sitemap.xml

View the following link to download the report. RunnerID:2890255663

[github-actions[bot]]

• Site: https://api.epa.gov New Alerts

  • Cross-Domain Misconfiguration [10098] total: 4:
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes/applicable?year=1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes?year=1.2&facilityId=1.2&stateCode=AL&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&sourceCategory=Automotive%20Stampings&programCodeInfo=ARP&page=1.2&perPage=1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities?page=1.2&perPage=1.2&stateCode=AL&epaRegion=epaRegion
  • A Client Error response code was returned by the server [100000] total: 4:
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes/applicable?year=1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes?year=1.2&facilityId=1.2&stateCode=AL&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&sourceCategory=Automotive%20Stampings&programCodeInfo=ARP&page=1.2&perPage=1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities?page=1.2&perPage=1.2&stateCode=AL&epaRegion=epaRegion
  • Non-Storable Content [10049] total: 4:
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes/applicable?year=1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes?year=1.2&facilityId=1.2&stateCode=AL&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&sourceCategory=Automotive%20Stampings&programCodeInfo=ARP&page=1.2&perPage=1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities?page=1.2&perPage=1.2&stateCode=AL&epaRegion=epaRegion

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 5:
    • https://api-easey-dev.app.cloud.gov
    • https://api-easey-dev.app.cloud.gov/
    • https://api-easey-dev.app.cloud.gov/.htaccess
    • https://api-easey-dev.app.cloud.gov/2237435685259058933
    • https://api-easey-dev.app.cloud.gov/elmah.axd

  • A Client Error response code was returned by the server [100000] total: 9:

    • https://api-easey-dev.app.cloud.gov
    • https://api-easey-dev.app.cloud.gov/
    • https://api-easey-dev.app.cloud.gov/.htaccess
    • https://api-easey-dev.app.cloud.gov/2237435685259058933
    • https://api-easey-dev.app.cloud.gov/elmah.axd
    • ..

    Resolved Alerts

  • Proxy Disclosure [40025] total: 6:
  • CORS Header [40040] total: 2:

View the following link to download the report. RunnerID:2890310141

[github-actions[bot]]

• Site: https://content-signature-2.cdn.mozilla.net New Alerts

  • Unexpected Content-Type was returned [100001] total: 1:
    • https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-09-19-18-34-07.chain

• Site: https://api.epa.gov

• Site: https://api-easey-dev.app.cloud.gov

View the following link to download the report. RunnerID:2890340108

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Non-Storable Content [10049] total: 4:

• Site: https://api-easey-dev.app.cloud.gov Resolved Alerts

  • Base64 Disclosure [10094] total: 1:
  • Non-Storable Content [10049] total: 1:

View the following link to download the report. RunnerID:2967303817

[github-actions[bot]]

• Site: https://content-signature-2.cdn.mozilla.net New Alerts

  • Unexpected Content-Type was returned [100001] total: 1:
    • https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain

• Site: https://api.epa.gov New Alerts

  • Non-Storable Content [10049] total: 4:
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes/applicable?year=1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes?year=1.2&facilityId=1.2&stateCode=AL&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&sourceCategory=Automotive%20Stampings&programCodeInfo=ARP&page=1.2&perPage=1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities?page=1.2&perPage=1.2&stateCode=AL&epaRegion=epaRegion

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Base64 Disclosure [10094] total: 1:
    • https://api-easey-dev.app.cloud.gov/facilities-mgmt/swagger-json
  • Non-Storable Content [10049] total: 1:
    • https://api-easey-dev.app.cloud.gov/facilities-mgmt/swagger-json

View the following link to download the report. RunnerID:2973485541

[github-actions[bot]]

• Site: https://content-signature-2.cdn.mozilla.net

• Site: https://api.epa.gov Resolved Alerts

  • Non-Storable Content [10049] total: 4:

• Site: https://api-easey-dev.app.cloud.gov Resolved Alerts

  • Base64 Disclosure [10094] total: 1:
  • Non-Storable Content [10049] total: 1:

View the following link to download the report. RunnerID:2974391446

[github-actions[bot]]

• Site: https://api.epa.gov New Alerts

  • Strict-Transport-Security Multiple Header Entries (Non-compliant with Spec) [10035] total: 4:
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes/applicable?year=1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes?year=1.2&facilityId=1.2&stateCode=AL&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&sourceCategory=Automotive%20Stampings&programCodeInfo=ARP&page=1.2&perPage=1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities?page=1.2&perPage=1.2&stateCode=AL&epaRegion=epaRegion
  • Base64 Disclosure [10094] total: 4:
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes/applicable?year=1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes?year=1.2&facilityId=1.2&stateCode=AL&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&sourceCategory=Automotive%20Stampings&programCodeInfo=ARP&page=1.2&perPage=1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities?page=1.2&perPage=1.2&stateCode=AL&epaRegion=epaRegion
  • Non-Storable Content [10049] total: 4:
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes/applicable?year=1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes?year=1.2&facilityId=1.2&stateCode=AL&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&sourceCategory=Automotive%20Stampings&programCodeInfo=ARP&page=1.2&perPage=1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities?page=1.2&perPage=1.2&stateCode=AL&epaRegion=epaRegion

  • Retrieved from Cache [10050] total: 4:

    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes/applicable?year=1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes?year=1.2&facilityId=1.2&stateCode=AL&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&sourceCategory=Automotive%20Stampings&programCodeInfo=ARP&page=1.2&perPage=1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities?page=1.2&perPage=1.2&stateCode=AL&epaRegion=epaRegion

    Resolved Alerts

  • Cross-Domain Misconfiguration [10098] total: 4:

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Base64 Disclosure [10094] total: 1:
    • https://api-easey-dev.app.cloud.gov/facilities-mgmt/swagger-json
  • Non-Storable Content [10049] total: 1:
    • https://api-easey-dev.app.cloud.gov/facilities-mgmt/swagger-json

View the following link to download the report. RunnerID:2983453729

[github-actions[bot]]

• Site: https://api.epa.gov

• Site: https://api-easey-dev.app.cloud.gov Resolved Alerts

  • Unexpected Content-Type was returned [100001] total: 5:

View the following link to download the report. RunnerID:3027029809

[github-actions[bot]]

• Site: https://api.epa.gov New Alerts

  • Application Error Disclosure [90022] total: 2:
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes/applicable?year=1.2&currentDate=currentDate
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes?year=1.2&facilityId=1.2&stateCode=AL&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&sourceCategory=Automotive%20Stampings&programCodeInfo=ARP&page=1.2&perPage=1.2&currentDate=currentDate

  • Information Disclosure - Debug Error Messages [10023] total: 2:

    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes/applicable?year=1.2&currentDate=currentDate
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes?year=1.2&facilityId=1.2&stateCode=AL&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&sourceCategory=Automotive%20Stampings&programCodeInfo=ARP&page=1.2&perPage=1.2&currentDate=currentDate

    Resolved Alerts

  • Base64 Disclosure [10094] total: 4:

• Site: https://api-easey-dev.app.cloud.gov Resolved Alerts

  • Base64 Disclosure [10094] total: 1:

View the following link to download the report. RunnerID:3072421193

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Strict-Transport-Security Multiple Header Entries (Non-compliant with Spec) [10035] total: 4:
  • Non-Storable Content [10049] total: 4:
  • Retrieved from Cache [10050] total: 4:

• Site: https://api-easey-dev.app.cloud.gov Resolved Alerts

  • Non-Storable Content [10049] total: 1:

View the following link to download the report. RunnerID:3209475095

[github-actions[bot]]

• Site: https://api.epa.gov New Alerts

  • Strict-Transport-Security Multiple Header Entries (Non-compliant with Spec) [10035] total: 4:
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes/applicable?year=1.2&currentDate=currentDate
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes?year=1.2&facilityId=1.2&stateCode=AL&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&sourceCategory=Automotive%20Stampings&programCodeInfo=ARP&page=1.2&perPage=1.2&currentDate=currentDate
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities?page=1.2&perPage=1.2&stateCode=AL&epaRegion=epaRegion
  • Non-Storable Content [10049] total: 4:
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes/applicable?year=1.2&currentDate=currentDate
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes?year=1.2&facilityId=1.2&stateCode=AL&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&sourceCategory=Automotive%20Stampings&programCodeInfo=ARP&page=1.2&perPage=1.2&currentDate=currentDate
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities?page=1.2&perPage=1.2&stateCode=AL&epaRegion=epaRegion
  • Retrieved from Cache [10050] total: 4:
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/1.2
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes/applicable?year=1.2&currentDate=currentDate
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities/attributes?year=1.2&facilityId=1.2&stateCode=AL&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&sourceCategory=Automotive%20Stampings&programCodeInfo=ARP&page=1.2&perPage=1.2&currentDate=currentDate
    • https://api.epa.gov/easey/dev/facilities-mgmt/facilities?page=1.2&perPage=1.2&stateCode=AL&epaRegion=epaRegion

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Non-Storable Content [10049] total: 1:
    • https://api-easey-dev.app.cloud.gov/facilities-mgmt/swagger-json

View the following link to download the report. RunnerID:3302309565

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Application Error Disclosure [90022] total: 2:
  • Information Disclosure - Debug Error Messages [10023] total: 2:

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 2:
    • https://api-easey-dev.app.cloud.gov/winscp.ini
    • https://api-easey-dev.app.cloud.gov/WS_FTP.ini

View the following link to download the report. RunnerID:3350416931