aquasecurity / aquasecurity/cloudsploit

ftpsOnlyAccessEnabled.js is returning incorrect results

Open
#1,456 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
3.8k
Forks
751
Avg merge
11d 9h
Merged PRs (30d)
3

Description

ftpsOnlyAccessEnabled.js is returning false positives. Rather than returning a result for each individual app service it appears as though if there is one failure on one resource all resources of that type fail.

In the screenshot I sent of the fail. The resource highlighted in yellow should have failed. The second resource should have passed the test.

![ExampleCapture](https://user-images.githubusercontent.com/101367072/200647223-1ce98f31-36ec-4a93-b300-9b4ea40ec00f.PNG)

Contributor guide

Open the contributing guide

Research direction

Start with ftpsOnlyAccessEnabled.js and reproduce the screenshot scenario with multiple app services. Check how results are aggregated across resources; done when each app service receives its own result, with only the failing resource reported as failed.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.