Closed jaleelsyed closed 2 years ago
Project : asdfadsf
Job : rbac
Env : Default
Category : RBAC
Tags : [OWASP - OTG-IDENT-001 , FX Top 10 - API Vulnerability, Endpoint_Access_Control]
Severity : Major
Region : local
Result : fail
Status Code : 500
Headers : {}
Endpoint : http://18.144.38.115:8090/example/v1/hotels/iEFIDCW1
Request : { "city" : "West Laishaton", "description" : "fEvkEjIs", "id" : "", "name" : "fEvkEjIs", "rating" : "1334190836" }
Response : Invalid mime type "application/xml, application/json": Invalid token character ',' in token "xml, application/json"
Logs : 2019-02-18 04:31:47 DEBUG [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : URL [http://18.144.38.115:8090/example/v1/hotels/iEFIDCW1] 2019-02-18 04:31:47 DEBUG [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : Method [PUT] 2019-02-18 04:31:47 DEBUG [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : Request [{ "city" : "West Laishaton", "description" : "fEvkEjIs", "id" : "", "name" : "fEvkEjIs", "rating" : "1334190836" }] 2019-02-18 04:31:47 DEBUG [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : Request-Headers [{Content-Type=[application/xml, application/json], Accept=[application/xml, application/json]}] 2019-02-18 04:31:47 DEBUG [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : Response [Invalid mime type "application/xml, application/json": Invalid token character ',' in token "xml, application/json"] 2019-02-18 04:31:47 DEBUG [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : Response-Headers [{}] 2019-02-18 04:31:47 DEBUG [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : StatusCode [500] 2019-02-18 04:31:47 DEBUG [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : Time [14] 2019-02-18 04:31:47 DEBUG [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : Size [115] 2019-02-18 04:31:47 ERROR [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : Assertion [@StatusCode == 401 OR @StatusCode == 403] resolved-to [500 == 401 OR 500 == 403] result [Failed]
--- FX Bot ---
Project : asdfadsf
Job : rbac
Env : Default
Category : RBAC
Tags : [OWASP - OTG-IDENT-001 , FX Top 10 - API Vulnerability, Endpoint_Access_Control]
Severity : Major
Region : local
Result : fail
Status Code : 500
Headers : {}
Endpoint : http://18.144.38.115:8090/example/v1/hotels/iEFIDCW1
Request :
{ "city" : "West Laishaton", "description" : "fEvkEjIs", "id" : "", "name" : "fEvkEjIs", "rating" : "1334190836" }
Response :
Invalid mime type "application/xml, application/json": Invalid token character ',' in token "xml, application/json"
Logs :
2019-02-18 04:31:47 DEBUG [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : URL [http://18.144.38.115:8090/example/v1/hotels/iEFIDCW1] 2019-02-18 04:31:47 DEBUG [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : Method [PUT] 2019-02-18 04:31:47 DEBUG [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : Request [{ "city" : "West Laishaton", "description" : "fEvkEjIs", "id" : "", "name" : "fEvkEjIs", "rating" : "1334190836" }] 2019-02-18 04:31:47 DEBUG [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : Request-Headers [{Content-Type=[application/xml, application/json], Accept=[application/xml, application/json]}] 2019-02-18 04:31:47 DEBUG [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : Response [Invalid mime type "application/xml, application/json": Invalid token character ',' in token "xml, application/json"] 2019-02-18 04:31:47 DEBUG [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : Response-Headers [{}] 2019-02-18 04:31:47 DEBUG [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : StatusCode [500] 2019-02-18 04:31:47 DEBUG [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : Time [14] 2019-02-18 04:31:47 DEBUG [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : Size [115] 2019-02-18 04:31:47 ERROR [ExampleV1HotelsIdPutRoleAdminDisallowedRbac] : Assertion [@StatusCode == 401 OR @StatusCode == 403] resolved-to [500 == 401 OR 500 == 403] result [Failed]
--- FX Bot ---