QA Certification Mgmt API ZAP Scan

[github-actions[bot]]

• Site: https://content-signature-2.cdn.mozilla.net New Alerts

  • Unexpected Content-Type was returned [100001] total: 1:
    • https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-09-19-18-34-07.chain

• Site: https://api.epa.gov New Alerts

  • Cross-Domain Misconfiguration [10098] total: 6:
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/export?facilityId=1.2&unitIds=unitIds&stackPipeIds=stackPipeIds&testSummaryIds=testSummaryIds&testTypeCodes=7DAY&beginDate=beginDate&endDate=endDate
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/linearities
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/linearities/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/linearities/linSumId/injections
    • ..
  • A Client Error response code was returned by the server [100000] total: 37:
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/workspace/locations/locId/test-summary/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/workspace/locations/locId/test-summary/testSumId/linearities/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/workspace/locations/locId/test-summary/testSumId/linearities/linSumId/injections/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/workspace/locations/locId/test-summary/testSumId/protocol-gases/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/workspace/locations/locId/test-summary/testSumId/rata/id
    • ..
  • Non-Storable Content [10049] total: 6:
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/export?facilityId=1.2&unitIds=unitIds&stackPipeIds=stackPipeIds&testSummaryIds=testSummaryIds&testTypeCodes=7DAY&beginDate=beginDate&endDate=endDate
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/linearities
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/linearities/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/linearities/linSumId/injections
    • ..

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 10:
    • https://api-easey-dev.app.cloud.gov
    • https://api-easey-dev.app.cloud.gov/
    • https://api-easey-dev.app.cloud.gov/.htaccess
    • https://api-easey-dev.app.cloud.gov/7199531561578984729
    • https://api-easey-dev.app.cloud.gov/?name=abc
    • ..
  • A Client Error response code was returned by the server [100000] total: 14:
    • https://api-easey-dev.app.cloud.gov
    • https://api-easey-dev.app.cloud.gov/
    • https://api-easey-dev.app.cloud.gov/.htaccess
    • https://api-easey-dev.app.cloud.gov/7199531561578984729
    • https://api-easey-dev.app.cloud.gov/?name=abc
    • ..
  • Non-Storable Content [10049] total: 1:
    • https://api-easey-dev.app.cloud.gov/qa-certification-mgmt/swagger-json

View the following link to download the report. RunnerID:2893838226

[github-actions[bot]]

• Site: https://api.epa.gov New Alerts

  • Application Error Disclosure [90022] total: 6:
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/workspace/locations/locId/test-summary/testSumId/linearities/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/workspace/locations/locId/test-summary/testSumId/linearities/linSumId/injections/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/workspace/locations/locId/test-summary/testSumId/protocol-gases/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/workspace/locations/locId/test-summary/testSumId/linearities/linSumId/injections
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/workspace/locations/locId/test-summary/testSumId/protocol-gases
    • ..
  • Information Disclosure - Debug Error Messages [10023] total: 6:
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/workspace/locations/locId/test-summary/testSumId/linearities/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/workspace/locations/locId/test-summary/testSumId/linearities/linSumId/injections/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/workspace/locations/locId/test-summary/testSumId/protocol-gases/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/workspace/locations/locId/test-summary/testSumId/linearities/linSumId/injections
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/workspace/locations/locId/test-summary/testSumId/protocol-gases
    • ..
  • Strict-Transport-Security Multiple Header Entries (Non-compliant with Spec) [10035] total: 7:
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/export?facilityId=1.2&unitIds=unitIds&stackPipeIds=stackPipeIds&testSummaryIds=testSummaryIds&testTypeCodes=7DAY&beginDate=beginDate&endDate=endDate
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/linearities
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/linearities/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/linearities/linSumId/injections
    • ..
  • Timestamp Disclosure - Unix [10096] total: 3:
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/workspace/locations/locId/test-summary/testSumId/linearities/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/rata/rataId/rata-summaries/rataSumId/rata-runs/%7Bid%7D
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/rata/rataId/rata-summaries/rataSumId/rata-runs/%7Bid%7D
  • Unexpected Content-Type was returned [100001] total: 1:
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/workspace/locations/locId/test-summary/id
  • Base64 Disclosure [10094] total: 6:
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/export?facilityId=1.2&unitIds=unitIds&stackPipeIds=stackPipeIds&testSummaryIds=testSummaryIds&testTypeCodes=7DAY&beginDate=beginDate&endDate=endDate
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/linearities/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/linearities/linSumId/injections/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/protocol-gases/id
    • ..

  • Retrieved from Cache [10050] total: 7:

    • https://api.epa.gov/easey/dev/qa-certification-mgmt/export?facilityId=1.2&unitIds=unitIds&stackPipeIds=stackPipeIds&testSummaryIds=testSummaryIds&testTypeCodes=7DAY&beginDate=beginDate&endDate=endDate
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/linearities
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/linearities/id
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/linearities/linSumId/injections
    • ..

    Resolved Alerts

  • Cross-Domain Misconfiguration [10098] total: 6:

• Site: https://api-easey-dev.app.cloud.gov

View the following link to download the report. RunnerID:2983481086

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Unexpected Content-Type was returned [100001] total: 1:

• Site: https://api-easey-dev.app.cloud.gov Resolved Alerts

  • Unexpected Content-Type was returned [100001] total: 5:

View the following link to download the report. RunnerID:3027053692

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Timestamp Disclosure - Unix [10096] total: 3:
  • Base64 Disclosure [10094] total: 6:

• Site: https://api-easey-dev.app.cloud.gov

View the following link to download the report. RunnerID:3072446723

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Application Error Disclosure [90022] total: 6:
  • Information Disclosure - Debug Error Messages [10023] total: 6:

• Site: https://api-easey-dev.app.cloud.gov

View the following link to download the report. RunnerID:3163574377

[github-actions[bot]]

• Site: https://api.epa.gov New Alerts

  • Application Error Disclosure [90022] total: 1:
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/appendix-e-correlation-test-summaries/appECorrTestSumId/appendix-e-correlation-test-runs/appECorrTestRunId/appendix-e-heat-input-from-gases
  • Information Disclosure - Debug Error Messages [10023] total: 1:
    • https://api.epa.gov/easey/dev/qa-certification-mgmt/locations/locId/test-summary/testSumId/appendix-e-correlation-test-summaries/appECorrTestSumId/appendix-e-correlation-test-runs/appECorrTestRunId/appendix-e-heat-input-from-gases

• Site: https://api-easey-dev.app.cloud.gov

View the following link to download the report. RunnerID:3209500744

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Application Error Disclosure [90022] total: 1:
  • Information Disclosure - Debug Error Messages [10023] total: 1:

• Site: https://api-easey-dev.app.cloud.gov

View the following link to download the report. RunnerID:3254777077

[github-actions[bot]]

• Site: https://api.epa.gov

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 2:
    • https://api-easey-dev.app.cloud.gov/winscp.ini
    • https://api-easey-dev.app.cloud.gov/WS_FTP.ini

View the following link to download the report. RunnerID:3350446422