CAMD Administrative & General Services ZAP Scan

[github-actions[bot]]

• Site: https://content-signature-2.cdn.mozilla.net New Alerts

  • Unexpected Content-Type was returned [100001] total: 1:
    • https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-09-19-18-34-07.chain

• Site: https://api.epa.gov New Alerts

  • Cross-Domain Misconfiguration [10098] total: 6:
    • https://api.epa.gov/easey/dev/camd-services/bookmarks/1.2
    • https://api.epa.gov/easey/dev/camd-services/bulk-files
    • https://api.epa.gov/easey/dev/camd-services/bookmarks
    • https://api.epa.gov/easey/dev/camd-services/bulk-files/gaftp-copy?type=EDR&from=1.2&to=1.2
    • https://api.epa.gov/easey/dev/camd-services/bulk-files/metadata
    • ..
  • A Client Error response code was returned by the server [100000] total: 8:
    • https://api.epa.gov/easey/dev/camd-services/bookmarks/1.2
    • https://api.epa.gov/easey/dev/camd-services/bulk-files
    • https://api.epa.gov/easey/dev/camd-services/bookmarks
    • https://api.epa.gov/easey/dev/camd-services/bulk-files/gaftp-copy?type=EDR&from=1.2&to=1.2
    • https://api.epa.gov/easey/dev/camd-services/bulk-files/metadata
    • ..
  • Non-Storable Content [10049] total: 6:
    • https://api.epa.gov/easey/dev/camd-services/bookmarks/1.2
    • https://api.epa.gov/easey/dev/camd-services/bulk-files
    • https://api.epa.gov/easey/dev/camd-services/bookmarks
    • https://api.epa.gov/easey/dev/camd-services/bulk-files/gaftp-copy?type=EDR&from=1.2&to=1.2
    • https://api.epa.gov/easey/dev/camd-services/bulk-files/metadata
    • ..

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 10:
    • https://api-easey-dev.app.cloud.gov
    • https://api-easey-dev.app.cloud.gov/
    • https://api-easey-dev.app.cloud.gov/.htaccess
    • https://api-easey-dev.app.cloud.gov/3265616479449394046
    • https://api-easey-dev.app.cloud.gov/?name=abc
    • ..
  • A Client Error response code was returned by the server [100000] total: 14:
    • https://api-easey-dev.app.cloud.gov
    • https://api-easey-dev.app.cloud.gov/
    • https://api-easey-dev.app.cloud.gov/.htaccess
    • https://api-easey-dev.app.cloud.gov/3265616479449394046
    • https://api-easey-dev.app.cloud.gov/?name=abc
    • ..
  • Base64 Disclosure [10094] total: 1:
    • https://api-easey-dev.app.cloud.gov/camd-services/swagger-json
  • Non-Storable Content [10049] total: 1:
    • https://api-easey-dev.app.cloud.gov/camd-services/swagger-json

View the following link to download the report. RunnerID:2893842121

[github-actions[bot]]

• Site: https://api.epa.gov New Alerts

  • Timestamp Disclosure - Unix [10096] total: 1:
    • https://api.epa.gov/easey/dev/camd-services/bookmarks/1.2

• Site: https://api-easey-dev.app.cloud.gov

View the following link to download the report. RunnerID:2983485480

[github-actions[bot]]

• Site: https://api.epa.gov New Alerts

  • Strict-Transport-Security Multiple Header Entries (Non-compliant with Spec) [10035] total: 1:
    • https://api.epa.gov/easey/dev/camd-services/bulk-files
  • Base64 Disclosure [10094] total: 1:
    • https://api.epa.gov/easey/dev/camd-services/bulk-files
  • Retrieved from Cache [10050] total: 1:
    • https://api.epa.gov/easey/dev/camd-services/bulk-files

• Site: https://api-easey-dev.app.cloud.gov Resolved Alerts

  • Unexpected Content-Type was returned [100001] total: 5:

View the following link to download the report. RunnerID:3027056980

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Base64 Disclosure [10094] total: 1:

• Site: https://api-easey-dev.app.cloud.gov Resolved Alerts

  • Base64 Disclosure [10094] total: 1:

View the following link to download the report. RunnerID:3072449582

[github-actions[bot]]

• Site: https://api.epa.gov New Alerts

  • Re-examine Cache-control Directives [10015] total: 1:
    • https://api.epa.gov/easey/dev/camd-services/bulk-files

• Site: https://api-easey-dev.app.cloud.gov

View the following link to download the report. RunnerID:3302341967

[github-actions[bot]]

• Site: https://api.epa.gov

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 2:
    • https://api-easey-dev.app.cloud.gov/winscp.ini
    • https://api-easey-dev.app.cloud.gov/WS_FTP.ini

View the following link to download the report. RunnerID:3350450570

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Cross-Domain Misconfiguration [10098] total: 9:
  • A Client Error response code was returned by the server [100000] total: 9:

• Site: https://api-easey-dev.app.cloud.gov

View the following link to download the report. RunnerID:3399076961

[github-actions[bot]]

• Site: https://api.epa.gov New Alerts

  • Cross-Domain Misconfiguration [10098] total: 1:
    • https://api.epa.gov/easey/dev/camd-services/submit

  • A Client Error response code was returned by the server [100000] total: 1:

    • https://api.epa.gov/easey/dev/camd-services/submit

    Resolved Alerts

  • Timestamp Disclosure - Unix [10096] total: 4:

• Site: https://api-easey-dev.app.cloud.gov

View the following link to download the report. RunnerID:3718898545