Monitor Plan Mgmt API ZAP Scan - Githubissues

US-EPA-CAMD / devops

Common DevOps files & build scripts for CI/CD pipelines

https://epa.gov/airmarkets

MIT License

1 stars 0 forks source link

Monitor Plan Mgmt API ZAP Scan #41

Open github-actions[bot] opened 1 year ago

github-actions[bot] commented 1 year ago

Site: https://content-signature-2.cdn.mozilla.net New Alerts
- Unexpected Content-Type was returned [100001] total: 1:
  - https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-09-19-18-34-07.chain
Site: https://api.epa.gov New Alerts
- Cross-Domain Misconfiguration [10098] total: 6:
- Timestamp Disclosure - Unix [10096] total: 3:
- A Client Error response code was returned by the server [100000] total: 98:
- Non-Storable Content [10049] total: 6:
Site: https://api-easey-dev.app.cloud.gov New Alerts
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://api-easey-dev.app.cloud.gov/monitor-plan-mgmt/swagger-json
- Unexpected Content-Type was returned [100001] total: 10:
- A Client Error response code was returned by the server [100000] total: 14:
- Non-Storable Content [10049] total: 1:
  - https://api-easey-dev.app.cloud.gov/monitor-plan-mgmt/swagger-json

View the following link to download the report. RunnerID:2893823654

github-actions[bot] commented 1 year ago

Site: https://api.epa.gov New Alerts
- Application Error Disclosure [90022] total: 6:
- Information Disclosure - Debug Error Messages [10023] total: 6:
- Strict-Transport-Security Multiple Header Entries (Non-compliant with Spec) [10035] total: 7:
- Base64 Disclosure [10094] total: 6:
- Retrieved from Cache [10050] total: 7:
  Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 6:
Site: https://api-easey-dev.app.cloud.gov

View the following link to download the report. RunnerID:2983467043

github-actions[bot] commented 1 year ago

Site: https://api.epa.gov Resolved Alerts
- Timestamp Disclosure - Unix [10096] total: 4:
Site: https://api-easey-dev.app.cloud.gov Resolved Alerts
- Unexpected Content-Type was returned [100001] total: 5:

View the following link to download the report. RunnerID:3027039471

github-actions[bot] commented 1 year ago

Site: https://api.epa.gov Resolved Alerts
- Base64 Disclosure [10094] total: 6:
Site: https://api-easey-dev.app.cloud.gov Resolved Alerts
- Timestamp Disclosure - Unix [10096] total: 1:

View the following link to download the report. RunnerID:3117382428

github-actions[bot] commented 1 year ago

Site: https://api.epa.gov
Site: https://api-easey-dev.app.cloud.gov New Alerts
- Unexpected Content-Type was returned [100001] total: 2:
  - https://api-easey-dev.app.cloud.gov/winscp.ini
  - https://api-easey-dev.app.cloud.gov/WS_FTP.ini

View the following link to download the report. RunnerID:3350429405