Fetch web server misconfiguration summary details

Provides a list of computers that have associated server misconfigurations (e.g., web server hardening issues). Supports filtering based on resource attributes

Endpoints

get /dcapi/threats/servermisconfigurations

Copy full URL

Request URL

https://{serverurl}/dcapi/threats/servermisconfigurations

Scope

DesktopCentralCloud.VulnerabilityMgmt.READCopied!

Header

Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52

Request Parameters

- Query Parameters

pagestringOptional

Displays the content of the provided page number.

customernamestringOptional

customeridlongOptional

pageLimitstringOptional

Displays the provided number of server misconfigurations details per page.

os_platform_namestringOptional

Filters web server misconfigurations based on the platform provided.

severitystringOptional

Filters web server misconfigurations based on the severity provided.

updated_timestringOptional

Filters web server misconfigurations based on the updated time provided.

affected_systemsstringOptional

published_timestringOptional

Filters web server misconfigurations based on the published time provided.

hardeningidstringOptional

Filters web server misconfigurations based on the hardening ID provided.

descriptionstringOptional

Filters web server misconfigurations that contain the provided hardening description.

hardeningnamestringOptional

Filters web server misconfigurations that contain the provided hardening name.

categorystringOptional

Filters web server misconfigurations based on the category provided.

resolutionstringOptional

Filters web server misconfigurations that contain the provided hardening resolution.

Sample Request

Curl

Java

Python

Deluge

PowerShell

Copied!

curl --request GET \
  --url https://appdomains/dcapi/threats/servermisconfigurations \
  --header 'Authorization: Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52'

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.io.IOException;
import java.net.http.HttpTimeoutException;

public class Main {
  public static void main(String[] args) {

    HttpRequest request = HttpRequest.newBuilder()
        .uri(URI.create("https://appdomains/dcapi/threats/servermisconfigurations"))
        .header("Authorization", "Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52")
        .method("GET", HttpRequest.BodyPublishers.noBody())
        .build();
    HttpResponse response = HttpClient.newHttpClient().send(request, HttpResponse.BodyHandlers.ofString());
    System.out.println(response.body());
  
  }
}

import http.client

conn = http.client.HTTPSConnection("appdomains")

headers = { 'Authorization': "Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52" }

conn.request("GET", "/dcapi/threats/servermisconfigurations", headers=headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))


    headersMap = Map();
    headersMap.put("Accept", "application/json");

    response = invokeUrl
    [
        url: "https://appDomains/dcapi/threats/servermisconfigurations"
        type: GET
        headers: headersMap
        connection: connection_name
    ]

    info response;

$headers=@{}
$headers.Add("Authorization", "Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52")
$response = Invoke-WebRequest -Uri 'https://appdomains/dcapi/threats/servermisconfigurations' -Method GET -Headers $headers

Response Parameters

- HTTP code 200

Response Body - application/json

JSON Object

Hide Sub-Attributes

Possible Response Codes

200HTTP code

Sample Response: HTTP 200

Copied!

  {
    "metadata": {
      "pageLimit": 30,
      "totalRecords": "2",
      "totalPages": 1,
      "links": {
        "next": null,
        "prev": null
      },
      "page": 1
    },
    "response_code": 200,
    "message_type": "servermisconfigurations",
    "message_response": {
      "servermisconfigurations": [
        {
          "os_platform_name": "Windows",
          "severity": "Moderate",
          "updated_time": "1540475593000",
          "affected_systems": 1,
          "published_time": "1540475595000",
          "hardeningid": "55",
          "description": "You can mitigate most of the common Cross Site Scripting attack using HttpOnly and Secure flag in a cookie. Without having HttpOnly and Secure, it is possible to steal or manipulate web application session and cookies and it s dangerous.",
          "hardeningname": "Set cookie with HttpOnly and Secure flag",
          "category": "Session hijacking",
          "resolution": "Check the HTTP header if the cookies contain HTTPOnly and Secure flag"
        },
        {
          "os_platform_name": "Windows",
          "severity": "Info",
          "updated_time": "1540475593000",
          "affected_systems": 1,
          "published_time": "1540475595000",
          "hardeningid": "111",
          "description": "The default installation of Tomcat includes connectors with default settings. These are traditionally set up for convenience, but may lead to security exposure. If you're using an application bundled with this web server, contact the application vendor to obtain the details of necessary connectors, and remove the connectors that are unused",
          "hardeningname": "Verify TomCat XML for unused connectors",
          "category": "Default Contents",
          "resolution": "Remove or comment each unused Connector in $CATALINA_HOME/conf/server.xml."
        }
      ]
    },
    "status": "success"
  }

▼ Show full

Duration: 1 minute | Threshold: 30 | Lock period: 5 minutes

Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.