ZAP Scan Baseline Report - Githubissues

equinor / sdp-flux

Flux continuous delivery to k8s

Apache License 2.0

23 stars 2 forks source link

ZAP Scan Baseline Report #75

Open github-actions[bot] opened 4 years ago

github-actions[bot] commented 4 years ago

Site: https://gitlab.dev.sdpaks.equinor.com New Alerts
- Reverse Tabnabbing [10108] total: 20:
- Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 20:
- Content Security Policy (CSP) Header Not Set [10038] total: 20:
- Cookie Without SameSite Attribute [10054] total: 20:
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 20:
- Absence of Anti-CSRF Tokens [10202] total: 20:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 20:
- Timestamp Disclosure - Unix [10096] total: 20:
- X-Content-Type-Options Header Missing [10021] total: 20:
- Information Disclosure - Suspicious Comments [10027] total: 8:
- Private IP Disclosure [2] total: 16:
- Application Error Disclosure [90022] total: 4:
- Loosely Scoped Cookie [90033] total: 3:
- PII Scanner [10062] total: 1:
  - https://gitlab.dev.sdpaks.equinor.com/assets/webpack/main.a6cddcb9.chunk.js
- Information Disclosure - Debug Error Messages [10023] total: 1:
  - https://gitlab.dev.sdpaks.equinor.com/help/downgrade_ee_to_ce/README.md

View the following link to download the report. RunnerID:97233451

github-actions[bot] commented 4 years ago

Site: http://sdp-web.sdpaks.equinor.com New Alerts
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 6:
Site: https://sdp-web.sdpaks.equinor.com New Alerts
- X-Content-Type-Options Header Missing [10021] total: 18:
- Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 8:
- Content Security Policy (CSP) Header Not Set [10038] total: 11:
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 20:
- X-Frame-Options Header Not Set [10020] total: 7:
- Reverse Tabnabbing [10108] total: 1:
  - https://sdp-web.sdpaks.equinor.com/

View the following link to download the report. RunnerID:99675645

github-actions[bot] commented 4 years ago

Site: http://sdp-web.sdpaks.equinor.com
Site: https://sdp-web.sdpaks.equinor.com New Alerts
- Modern Web Application [10109] total: 2:
  - https://sdp-web.sdpaks.equinor.com/jenkins/
  - https://sdp-web.sdpaks.equinor.com/npm-repo/

View the following link to download the report. RunnerID:123201966

github-actions[bot] commented 4 years ago

Site: http://sdp-web.sdpaks.equinor.com Resolved Alerts
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 6:
Site: https://sdp-web.sdpaks.equinor.com Resolved Alerts
- Modern Web Application [10109] total: 2:
- Content Security Policy (CSP) Header Not Set [10038] total: 11:
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 20:
- Reverse Tabnabbing [10108] total: 1:

View the following link to download the report. RunnerID:141499630

github-actions[bot] commented 4 years ago

Site: http://sdp-web.sdpaks.equinor.com New Alerts
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 6:
Site: https://sdp-web.sdpaks.equinor.com New Alerts
- Modern Web Application [10109] total: 2:
  - https://sdp-web.sdpaks.equinor.com/jenkins/
  - https://sdp-web.sdpaks.equinor.com/npm-repo/
- Content Security Policy (CSP) Header Not Set [10038] total: 11:
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 20:
- Reverse Tabnabbing [10108] total: 1:
  - https://sdp-web.sdpaks.equinor.com/

View the following link to download the report. RunnerID:142270620