GET Web Application Security Evidence: Security Misconfiguration

⇤ Web Application Security Findings

https://api.bitsighttech.com/ratings/v1/companies/company_guid/findings?risk_vector=web_appsec

Get security misconfiguration evidence, including:

• CORS Violation
• Directory Listing Exposure
• HTTPS to HTTP Redirects
• Internal Server Error
• Overly Permissive CORS Whitelist
• Reverse Tabnabbing
• TLS Errors on Page Resource Fetch

For details specific to Web Application Security, use the ?risk_vector=web_appsec parameter. Other query parameters are listed in GET: Finding Details.

CORS Violation

[assessmentName = cors_violation]

Example Response

{
  "resource": "url",
  "resolutionStatus": "blocked",
  "message": "Access to font at 'url' from origin 'url' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.",

  ⊕ See additional evidences

}

Response Attributes

resource

resolutionStatus

message

Directory Listing Exposure

[assessmentName = directory_listing_exposure]

Example Response

{
  "url": "url",
  "server": "Apache 2",

  ⊕ See additional evidences

}

Response Attributes

url

server

HTTPS to HTTP Redirects

[assessmentName = https_to_http_redirect]

Example Response

[
  {
    "value": "url",
    "responseChain": [
      {
        "url": "url",
        "statusCode": 301,
        "ip": "ip",
        "port": 80
      },
      […]
    ],

    ⊕ See additional evidences

  }
]

Response Attributes

value

responseChain

url

statusCode

ip

port

Internal Server Error

[assessmentName = internal_server_error]

Example Response

{
  "url": "url",
  "message": "Request produced a 500 Internal Server Error response",

  ⊕ See additional evidences

}

Response Attributes

url

message

Overly Permissive CORS Whitelist

[assessmentName = permissive_cors_whitelist]

Example Response

{
  "name": "Access-Control-Allow-Origin",
  "value": "*",
  "resourceUrl":"http://example.com/",

  ⊕ See additional evidences

}

Response Attributes

name

value

resourceUrl

Reverse Tabnabbing

[assessmentName = reverse_tabnabbing]

Example Response

{
  "resource": "url",
  "attributes": "rel=\"noopener\" href=\"url\" class=\"m-last-foc m-last-foc-main\" target=\"_blank\"",

  ⊕ See additional evidences

}

Response Attributes

resource

attributes

TLS Errors on Page Resource Fetch

[assessmentName = tls_error]

Example Response

{
  "certificate": "MIIEPDCCAySgAwIBAg...+oghLrGREt",
  "message": "This site is missing a valid, trusted certificate (net::ERR_CERT_COMMON_NAME_INVALID).",

  ⊕ See additional evidences

}

Response Attributes

certificate

message

hash