Detect Springboot Env Actuator

Febna V M

Published on

01 Oct 2021

Vulnerability

The Spring boot Actuator enables you to monitor and control application consumption in a production environment without requiring any coding or configuration. Several sub-endpoints, such as env, health, and metrics, are available in the Actuator. If env endpoint is enabled in production it will expose our sensitive information such as passwords, private keys etc.

Mitigation / Precaution

Give proper permission for these files

Automated human-like penetration testing for your web apps & APIs

Teams using Beagle Security are set up in minutes, embrace release-based CI/CD security testing and save up to 65% with timely remediation of vulnerabilities. Sign up for a free account to see what it can do for you.

Product tour

Written by