Skip to content

Sensitive Data: Apache Tomcat - Default Login Discovery

Identifier: tomcat_examples_login

Scanner(s) Support

GraphQL Scanner REST Scanner WebApp Scanner

Description

Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 default login credentials were successful.

Reference:

Configuration

Example

Example configuration:

---
security_tests:
  tomcat_examples_login:
    assets_allowed:
    - REST
    - GRAPHQL
    - WEBAPP
    skip: false

Reference

assets_allowed

Type : List[AssetType]*

List of assets that this check will cover.

skip

Type : boolean

Skip the test if true.