Fetch resource web server misconfiguration details

Provides a comprehensive list of server-side misconfigurations (e.g., web server hardening issues) detected across systems. Offers extensive filtering capabilities to narrow down results.

Endpoints

get /dcapi/threats/systemreport/servermisconfigurations

Copy full URL

Request URL

https://{server-hostname}:8383/dcapi/threats/systemreport/servermisconfigurations

Scope

VulnerabilityMgmt.READCopied!

Header

Authorization: d92d4xxxxxxxxxxxxx15f52

Sample Request

Curl

Java

Python

Deluge

PowerShell

Copied!

curl --request GET \
  --url https://appdomain/dcapi/threats/systemreport/servermisconfigurations \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52'

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.io.IOException;
import java.net.http.HttpTimeoutException;

public class Main {
  public static void main(String[] args) {

    HttpRequest request = HttpRequest.newBuilder()
        .uri(URI.create("https://appdomain/dcapi/threats/systemreport/servermisconfigurations"))
        .header("Authorization", " d92d4xxxxxxxxxxxxx15f52")
        .method("GET", HttpRequest.BodyPublishers.noBody())
        .build();
    HttpResponse response = HttpClient.newHttpClient().send(request, HttpResponse.BodyHandlers.ofString());
    System.out.println(response.body());
  
  }
}

import http.client

conn = http.client.HTTPSConnection("appdomain")

headers = { 'Authorization': " d92d4xxxxxxxxxxxxx15f52" }

conn.request("GET", "/dcapi/threats/systemreport/servermisconfigurations", headers=headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))


    headersMap = Map();
    headersMap.put("Accept", "application/json");

    response = invokeUrl
    [
        url: "https://appDomain/dcapi/threats/systemreport/servermisconfigurations"
        type: GET
        headers: headersMap
        connection: connection_name
    ]

    info response;

$headers=@{}
$headers.Add("Authorization", " d92d4xxxxxxxxxxxxx15f52")
$response = Invoke-WebRequest -Uri 'https://appdomain/dcapi/threats/systemreport/servermisconfigurations' -Method GET -Headers $headers

▼ Show full

Response Parameters

- HTTP code 200

Response Body - application/json

JSON object

Hide Sub-Attributes

Possible Response Codes

200HTTP code

Sample Response: HTTP 200

Copied!

  {
    "metadata": {
      "pageLimit": 30,
      "totalRecords": "1",
      "totalPages": 1,
      "links": {
        "next": null,
        "prev": null
      },
      "page": 1
    },
    "response_code": 200,
    "message_type": "systemreport",
    "message_response": {
      "systemreport": [
        {
          "servermisconfigurations": [
            {
              "updatedtime": "1704451505960",
              "hardening_status": "open",
              "filepath": "C:\\Program Files\\ManageEngine\\PatchConnectPlus",
              "hardeningid": "55"
            },
            {
              "updatedtime": "1704451505960",
              "hardening_status": "open",
              "filepath": "C:\\Program Files\\ManageEngine\\PatchConnectPlus",
              "hardeningid": "111"
            }
          ],
          "resource_id": "304"
        }
      ]
    },
    "status": "success"
  }

▼ Show full

Duration: 1 minute | Threshold: 30 | Lock period: 5 minutes

Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.