Add support for MITRE ATT&CK
This commit is contained in:
+4
-1
@@ -1,4 +1,5 @@
|
||||
#import "addons/cvss.typ" as cvss
|
||||
#import "addons/cvss.typ"
|
||||
#import "addons/mitre.typ"
|
||||
|
||||
= Findings
|
||||
|
||||
@@ -29,6 +30,8 @@ Both applications have a login screen and cannot be used by unauthorized visitor
|
||||
|
||||
The version of `Uptime Kuma` is not specified, while the version of `Nginx Proxy Manager` is 2.11.2 and free of publicly known vulnerabilities (CVEs).
|
||||
|
||||
This is referenced in MITRE's ATT&CK framework as #mitre.reference(name: "External Remote Services").
|
||||
|
||||
=== Evaluation
|
||||
|
||||
The administration interfaces are not vulnerable and cannot be used without valid credentials. Because of this, the findings are considered purely informative.
|
||||
|
||||
Reference in New Issue
Block a user