devopsenggineer
commented
5 years ago Project : t
Job : Default
Env : Default
Region : FXLabs/US_WEST_1
Result : fail
Status Code : 200
Headers : {Server=[nginx/1.12.1], Date=[Sat, 23 Feb 2019 11:25:52 GMT], Content-Length=[0], Connection=[keep-alive], Allow=[GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS]}
Endpoint : http://52.53.242.1/vault/error
Request :
Response :
null
Logs :
Assertion [@StatusCode == 401 OR @StatusCode == 403] resolved-to [200 == 401 OR 200 == 403] result [Failed]
--- FX Bot ---
Project : t
Job : Default
Env : Default
Category : InvalidAuthEmpty
Tags : [OWASP A2, OWASP A5, OWASP A6, OWASP A7, [PCI DSS 3.0] 6.5.8, [PCI DSS 3.0] 6.5.10, OTG-AUTHN-004, FX Top 10 - API Vulnerability, Non-Intrusive]
Severity : Major
Region : FXLabs/US_WEST_1
Result : fail
Status Code : 200
Headers : {Server=[nginx/1.12.1], Date=[Sat, 23 Feb 2019 05:33:02 GMT], Content-Length=[0], Connection=[keep-alive], Allow=[GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS]}
Endpoint : http://52.53.242.1/vault/error
Request :
Response :
null
Logs :
2019-02-23 05:33:02 DEBUG [ErrorOptionsAuthInvalidEmpty] : URL [http://52.53.242.1/vault/error] 2019-02-23 05:33:02 DEBUG [ErrorOptionsAuthInvalidEmpty] : Method [OPTIONS] 2019-02-23 05:33:02 DEBUG [ErrorOptionsAuthInvalidEmpty] : Request [] 2019-02-23 05:33:02 DEBUG [ErrorOptionsAuthInvalidEmpty] : Request-Headers [{Content-Type=[application/json], Accept=[application/json]}] 2019-02-23 05:33:02 DEBUG [ErrorOptionsAuthInvalidEmpty] : Response [null] 2019-02-23 05:33:02 DEBUG [ErrorOptionsAuthInvalidEmpty] : Response-Headers [{Server=[nginx/1.12.1], Date=[Sat, 23 Feb 2019 05:33:02 GMT], Content-Length=[0], Connection=[keep-alive], Allow=[GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS]}] 2019-02-23 05:33:02 DEBUG [ErrorOptionsAuthInvalidEmpty] : StatusCode [200] 2019-02-23 05:33:02 DEBUG [ErrorOptionsAuthInvalidEmpty] : Time [79] 2019-02-23 05:33:02 DEBUG [ErrorOptionsAuthInvalidEmpty] : Size [0] 2019-02-23 05:33:02 ERROR [ErrorOptionsAuthInvalidEmpty] : Assertion [@StatusCode == 401 OR @StatusCode == 403] resolved-to [200 == 401 OR 200 == 403] result [Failed]
--- FX Bot ---