diff --git a/plugins/ivanti/connect_secure/CVE-2023-46805.yaml b/plugins/ivanti/connect_secure/CVE-2023-46805.yaml index f123a4675..1dd1f7c03 100644 --- a/plugins/ivanti/connect_secure/CVE-2023-46805.yaml +++ b/plugins/ivanti/connect_secure/CVE-2023-46805.yaml @@ -43,17 +43,14 @@ http: - type: dsl dsl: - 'status_code_1 == 200' - - 'contains(body_1, "build")' - - 'contains(body_1, "system-information")' - - 'contains(body_1, "software-inventory")' + - 'contains_all(body_1, "build", "system-information", "software-inventory")' - 'contains(header_1, "application/json")' condition: and - type: dsl dsl: - 'status_code_2 == 200' - - 'contains(body_2, "poll_interval")' - - 'contains(body_2, "block_message")' + - 'contains_all(body_2, "poll_interval\": 300", "block_message\": \"")' - 'contains(header_2, "application/json")' condition: and -# digest: 4a0a0047304502204ce6f60ef24fce30190ea7ba01627fbca1aed1ae80b11b7f5735c74db013d020022100b21ef93a501b8278f0621f6eb80984f16f66275b761b45d67834eeaeae10b8b5:922c64590222798bb761d5b6d8e72950 \ No newline at end of file +# digest: 4a0a004730450221009f5cef1114dc5403c6b452ef7dc6aff8c04873e36fb68d4f74affe07c70473250220326e72de19168d343b904c6b5a932add1091773c438ed22f81debb38a7fb6bb5:922c64590222798bb761d5b6d8e72950 \ No newline at end of file