Master Data Mgmt API ZAP Scan

[github-actions[bot]]

• Site: https://content-signature-2.cdn.mozilla.net New Alerts

  • Unexpected Content-Type was returned [100001] total: 1:
    • https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-09-19-18-34-07.chain

• Site: https://api.epa.gov New Alerts

  • Cross-Domain Misconfiguration [10098] total: 6:
    • https://api.epa.gov/easey/dev/master-data-mgmt/account-types?exclude=CASURR
    • https://api.epa.gov/easey/dev/master-data-mgmt/control-technologies
    • https://api.epa.gov/easey/dev/master-data-mgmt/fuel-types
    • https://api.epa.gov/easey/dev/master-data-mgmt/programs?exclude=ARP&isActive=true&emissionsUIFilter=true&allowanceUIFilter=true&complianceUIFilter=true
    • https://api.epa.gov/easey/dev/master-data-mgmt/states
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • https://api.epa.gov/easey/dev/master-data-mgmt/operating-condition-codes
  • A Client Error response code was returned by the server [100000] total: 60:
    • https://api.epa.gov/easey/dev/master-data-mgmt/account-types?exclude=CASURR
    • https://api.epa.gov/easey/dev/master-data-mgmt/acquisiton-method-codes
    • https://api.epa.gov/easey/dev/master-data-mgmt/analyzer-range-codes
    • https://api.epa.gov/easey/dev/master-data-mgmt/aps-codes
    • https://api.epa.gov/easey/dev/master-data-mgmt/basis-codes
    • ..
  • Non-Storable Content [10049] total: 6:
    • https://api.epa.gov/easey/dev/master-data-mgmt/account-types?exclude=CASURR
    • https://api.epa.gov/easey/dev/master-data-mgmt/control-technologies
    • https://api.epa.gov/easey/dev/master-data-mgmt/fuel-types
    • https://api.epa.gov/easey/dev/master-data-mgmt/programs?exclude=ARP&isActive=true&emissionsUIFilter=true&allowanceUIFilter=true&complianceUIFilter=true
    • https://api.epa.gov/easey/dev/master-data-mgmt/states
    • ..

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 10:
    • https://api-easey-dev.app.cloud.gov
    • https://api-easey-dev.app.cloud.gov/
    • https://api-easey-dev.app.cloud.gov/.htaccess
    • https://api-easey-dev.app.cloud.gov/4163490155281427583
    • https://api-easey-dev.app.cloud.gov/?name=abc
    • ..
  • A Client Error response code was returned by the server [100000] total: 14:
    • https://api-easey-dev.app.cloud.gov
    • https://api-easey-dev.app.cloud.gov/
    • https://api-easey-dev.app.cloud.gov/.htaccess
    • https://api-easey-dev.app.cloud.gov/4163490155281427583
    • https://api-easey-dev.app.cloud.gov/?name=abc
    • ..
  • Base64 Disclosure [10094] total: 1:
    • https://api-easey-dev.app.cloud.gov/master-data-mgmt/swagger-json
  • Re-examine Cache-control Directives [10015] total: 1:
    • https://api-easey-dev.app.cloud.gov/master-data-mgmt/swagger-json
  • Storable and Cacheable Content [10049] total: 1:
    • https://api-easey-dev.app.cloud.gov/master-data-mgmt/swagger-json

View the following link to download the report. RunnerID:2890402730

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Application Error Disclosure [90022] total: 6:
  • Information Disclosure - Debug Error Messages [10023] total: 6:

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 2:

    • https://api-easey-dev.app.cloud.gov/winscp.ini
    • https://api-easey-dev.app.cloud.gov/WS_FTP.ini

    Resolved Alerts

  • Base64 Disclosure [10094] total: 1:

View the following link to download the report. RunnerID:3718779618

[github-actions[bot]]

• Site: https://api.epa.gov

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 2:
    • https://api-easey-dev.app.cloud.gov/winscp.ini
    • https://api-easey-dev.app.cloud.gov/WS_FTP.ini

View the following link to download the report. RunnerID:3718853890

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Application Error Disclosure [90022] total: 6:
  • Information Disclosure - Debug Error Messages [10023] total: 6:

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 2:

    • https://api-easey-dev.app.cloud.gov/winscp.ini
    • https://api-easey-dev.app.cloud.gov/WS_FTP.ini

    Resolved Alerts

  • Base64 Disclosure [10094] total: 1:

View the following link to download the report. RunnerID:3718864978

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Application Error Disclosure [90022] total: 6:
  • Information Disclosure - Debug Error Messages [10023] total: 6:

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 2:

    • https://api-easey-dev.app.cloud.gov/winscp.ini
    • https://api-easey-dev.app.cloud.gov/WS_FTP.ini

    Resolved Alerts

  • Base64 Disclosure [10094] total: 1:

View the following link to download the report. RunnerID:3770130988

[github-actions[bot]]

• Site: https://api.epa.gov

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 2:
    • https://api-easey-dev.app.cloud.gov/winscp.ini
    • https://api-easey-dev.app.cloud.gov/WS_FTP.ini

View the following link to download the report. RunnerID:3770204051

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Application Error Disclosure [90022] total: 6:
  • Information Disclosure - Debug Error Messages [10023] total: 6:

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 2:

    • https://api-easey-dev.app.cloud.gov/winscp.ini
    • https://api-easey-dev.app.cloud.gov/WS_FTP.ini

    Resolved Alerts

  • Base64 Disclosure [10094] total: 1:

View the following link to download the report. RunnerID:3770214213

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Application Error Disclosure [90022] total: 6:
  • Information Disclosure - Debug Error Messages [10023] total: 6:

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 2:

    • https://api-easey-dev.app.cloud.gov/winscp.ini
    • https://api-easey-dev.app.cloud.gov/WS_FTP.ini

    Resolved Alerts

  • Base64 Disclosure [10094] total: 1:

View the following link to download the report. RunnerID:3810908828

[github-actions[bot]]

• Site: https://api.epa.gov

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 2:
    • https://api-easey-dev.app.cloud.gov/winscp.ini
    • https://api-easey-dev.app.cloud.gov/WS_FTP.ini

View the following link to download the report. RunnerID:3810981900

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Application Error Disclosure [90022] total: 6:
  • Information Disclosure - Debug Error Messages [10023] total: 6:

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 2:

    • https://api-easey-dev.app.cloud.gov/winscp.ini
    • https://api-easey-dev.app.cloud.gov/WS_FTP.ini

    Resolved Alerts

  • Base64 Disclosure [10094] total: 1:

View the following link to download the report. RunnerID:3810992599

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Application Error Disclosure [90022] total: 6:
  • Information Disclosure - Debug Error Messages [10023] total: 6:

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 2:

    • https://api-easey-dev.app.cloud.gov/winscp.ini
    • https://api-easey-dev.app.cloud.gov/WS_FTP.ini

    Resolved Alerts

  • Base64 Disclosure [10094] total: 1:

View the following link to download the report. RunnerID:3860788795

[github-actions[bot]]

• Site: https://api.epa.gov

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 2:
    • https://api-easey-dev.app.cloud.gov/winscp.ini
    • https://api-easey-dev.app.cloud.gov/WS_FTP.ini

View the following link to download the report. RunnerID:3860869027

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Application Error Disclosure [90022] total: 6:
  • Information Disclosure - Debug Error Messages [10023] total: 6:

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 2:

    • https://api-easey-dev.app.cloud.gov/winscp.ini
    • https://api-easey-dev.app.cloud.gov/WS_FTP.ini

    Resolved Alerts

  • Base64 Disclosure [10094] total: 1:

View the following link to download the report. RunnerID:3860879610