search

jaleelsyed / fx-local

0 stars 0 forks source link

adsffasd : ExampleV1HotelsIdGetRoleUserDisallowedRbac #138

Closed jaleelsyed closed 2 years ago

jaleelsyed commented 5 years ago

Project : adsffasd

Job : rbac

Env : Default

Category : RBAC

Tags : [OWASP - OTG-IDENT-001 , FX Top 10 - API Vulnerability, Endpoint_Access_Control]

Severity : Major

Region : local

Result : fail

Status Code : 406

Headers : {X-Application-Context=[application:8090], Content-Length=[0], Date=[Mon, 18 Feb 2019 16:43:08 GMT]}

Endpoint : http://18.144.38.115:8090/example/v1/hotels/RiTIPa5a

Request :

Response :

Logs :
2019-02-18 04:43:07 DEBUG [ExampleV1HotelsIdGetRoleUserDisallowedRbac] : URL [http://18.144.38.115:8090/example/v1/hotels/RiTIPa5a] 2019-02-18 04:43:07 DEBUG [ExampleV1HotelsIdGetRoleUserDisallowedRbac] : Method [GET] 2019-02-18 04:43:07 DEBUG [ExampleV1HotelsIdGetRoleUserDisallowedRbac] : Request [] 2019-02-18 04:43:07 DEBUG [ExampleV1HotelsIdGetRoleUserDisallowedRbac] : Request-Headers [{Content-Type=[application/json], Accept=[application/xml, application/json]}] 2019-02-18 04:43:07 DEBUG [ExampleV1HotelsIdGetRoleUserDisallowedRbac] : Response [] 2019-02-18 04:43:07 DEBUG [ExampleV1HotelsIdGetRoleUserDisallowedRbac] : Response-Headers [{X-Application-Context=[application:8090], Content-Length=[0], Date=[Mon, 18 Feb 2019 16:43:08 GMT]}] 2019-02-18 04:43:07 DEBUG [ExampleV1HotelsIdGetRoleUserDisallowedRbac] : StatusCode [406] 2019-02-18 04:43:07 DEBUG [ExampleV1HotelsIdGetRoleUserDisallowedRbac] : Time [615] 2019-02-18 04:43:07 DEBUG [ExampleV1HotelsIdGetRoleUserDisallowedRbac] : Size [0] 2019-02-18 04:43:07 ERROR [ExampleV1HotelsIdGetRoleUserDisallowedRbac] : Assertion [@StatusCode == 401 OR @StatusCode == 403] resolved-to [406 == 401 OR 406 == 403] result [Failed]

--- FX Bot ---