Unauthenticated Access to Installed Gadgets - carnal0wnage/J-PWN GitHub Wiki

Unauthenticated Access to Installed Gadgets

Category: [Info Disclosure]

module name: check_unauthenticated_installed_gadgets

url: https://jiraserver/rest/config/1.0/directory

+ Unauthenticated Installed Gadgets [Manually Inspect] 
  URL: https://jiraserver/rest/config/1.0/directory
Categories:
  - Jira
  - Confluence
  - Fisheye/Crucible
  - Crowd
  - Clover
  - Bamboo
  - Admin
  - Charts
  - Wallboard
  - Other
  - [No Name Found]
  - [No Name Found]
  - [No Name Found]

Gadgets:
  - Title: Wallboard Spacer Gadget
    Author: Atlassian
    Description: Allows for custom spacing between gadgets in a wallboard
    Thumbnail: https://jiraserver/s/-m61nqb/801000/6411e0087192541a09d88223fb51a6a0/3.0.2/_/download/resources/com.atlassian.jirawallboard.atlassian-wallboard-plugin:spacer-gadget/images/spacer-gadget-preview.png
    Categories: Wallboard

  - Title: Вход в систему
    Author: Atlassian
    Description: Позволяет пользователю войти в экземпляр системы Jira
    Thumbnail: /download/resources/com.atlassian.jira.gadgets:login-dashboard-item-resources/login-thumb.png
    Categories: Jira

  - Title: Информация
    Author: Atlassian
    Description: Информация о данной инсталляции Jira.
    Thumbnail: /download/resources/com.atlassian.jira.gadgets:introduction-gadget/text-thumb.png
    Categories: Jira