Description
WAPPLES through 6.0 has a hardcoded systemi account. A threat actor could use this account to access the system configuration and confidential information (such as SSL keys) via an HTTPS request to the /webapi/ URI on port 443 or 5001.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- WAPPLES Web Application Firewall <=6.0 - Hardcoded Credentials http/cves/2022/CVE-2022-35413.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.