diff --git a/http/exposed-panels/fortinet/f5-next-central-manager.yaml b/http/exposed-panels/fortinet/f5-next-central-manager.yaml new file mode 100644 index 00000000000..02873fe6adc --- /dev/null +++ b/http/exposed-panels/fortinet/f5-next-central-manager.yaml @@ -0,0 +1,35 @@ +id: f5-next-central-manager + +info: + name: F5 Next Central Manager Panel - Detect + author: EgemenKochisarli + severity: info + description: | + F5 Next Central Manager login panel was detected. + reference: + - https://clouddocs.f5.com/bigip-next/latest/use_cm/ + classification: + cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N + cwe-id: CWE-200 + cpe: cpe:2.3:h:f5:big-ip:*:*:*:*:*:*:*:* + metadata: + verified: true + max-request: 1 + vendor: f5 + product: big-ip + tags: panel,fortinet,login + +http: + - method: GET + path: + - "{{BaseURL}}/gui/login" + + matchers-condition: and + matchers: + - type: word + words: + - "BIG-IP Next | Central Manager" + + - type: status + status: + - 200