payload: {"action":"opened","issue":{"url":"https://api.github.com/repos/humera987/FXLabs-Test-Automation/issues/35540","repository_url":"https://api.github.com/repos/humera987/FXLabs-Test-Automation","labels_url":"https://api.github.com/repos/humera987/FXLabs-Test-Automation/issues/35540/labels{/name}","comments_url":"https://api.github.com/repos/humera987/FXLabs-Test-Automation/issues/35540/comments","events_url":"https://api.github.com/repos/humera987/FXLabs-Test-Automation/issues/35540/events","html_url":"https://github.com/humera987/FXLabs-Test-Automation/issues/35540","id":425403074,"node_id":"MDU6SXNzdWU0MjU0MDMwNzQ=","number":35540,"title":"Vulnerability [ABAC_Level7] : PUT:/api/v1/accounts/id","user":{"login":"humera987","id":40787463,"node_id":"MDQ6VXNlcjQwNzg3NDYz","avatar_url":"https://avatars1.githubusercontent.com/u/40787463?v=4","gravatar_id":"","url":"https://api.github.com/users/humera987","html_url":"https://github.com/humera987","followers_url":"https://api.github.com/users/humera987/followers","following_url":"https://api.github.com/users/humera987/following{/other_user}","gists_url":"https://api.github.com/users/humera987/gists{/gist_id}","starred_url":"https://api.github.com/users/humera987/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/humera987/subscriptions","organizations_url":"https://api.github.com/users/humera987/orgs","repos_url":"https://api.github.com/users/humera987/repos","events_url":"https://api.github.com/users/humera987/events{/privacy}","received_events_url":"https://api.github.com/users/humera987/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2019-03-26T12:59:35Z","updated_at":"2019-03-26T12:59:35Z","closed_at":null,"author_association":"OWNER","body":"Project  :  SanityTesting\n\nTemplate  :  ApiV1AccountsIdPutAccountaccounttypehttpusercDisallowAbact7\n\nRun Id  :  <html><a href=https://18.144.40.113/#/app/projects/8a80800669b9ccaf0169b9d051af01a7/jobs/8a80800669b9ccaf0169b9d057bc02d7/runs/8a80800669b9ccaf0169b9ece9fc512e>8a80800669b9ccaf0169b9ece9fc512e</a></html>\n\nJob  :  Default\n\nEnv  :  Default\n\nCategory  :  ABAC_Level7\n\nTags  :  [FX Top 10 - API Vulnerability, Data_Access_Control]\n\nSeverity  :  Major\n\nRegion  :  US_WEST\n\nResult  :  fail\n\nStatus Code  :  500\n\nHeaders  :  {}\n\nEndpoint  :  http://13.56.210.25/api/v1/api/v1/accounts/\n\nRequest  :  \n{\n  \"accessKey\" : \"UHKd4HIk\",\n  \"accountType\" : \"GitHub\",\n  \"allowedRegions\" : [ \"UHKd4HIk\" ],\n  \"createdBy\" : \"\",\n  \"createdDate\" : \"\",\n  \"id\" : \"\",\n  \"inactive\" : false,\n  \"modifiedBy\" : \"\",\n  \"modifiedDate\" : \"\",\n  \"name\" : \"UHKd4HIk\",\n  \"org\" : {\n    \"createdBy\" : \"\",\n    \"createdDate\" : \"\",\n    \"id\" : \"\",\n    \"inactive\" : false,\n    \"modifiedBy\" : \"\",\n    \"modifiedDate\" : \"\",\n    \"name\" : \"UHKd4HIk\",\n    \"version\" : \"\"\n  },\n  \"prop1\" : \"UHKd4HIk\",\n  \"prop2\" : \"UHKd4HIk\",\n  \"prop3\" : \"UHKd4HIk\",\n  \"region\" : \"UHKd4HIk\",\n  \"secretKey\" : \"UHKd4HIk\",\n  \"version\" : \"\"\n}\n\nResponse  :  \nI/O error on PUT request for \"http://13.56.210.25/api/v1/api/v1/accounts/\": Read timed out; nested exception is java.net.SocketTimeoutException: Read timed out\n\nLogs  :  \n2019-03-26 00:59:05  DEBUG [AccountAccounttypeHttp17CreateUserAInitAbact7] : URL [http://13.56.210.25/api/v1/api/v1/accounts]\n2019-03-26 00:59:05  DEBUG [AccountAccounttypeHttp17CreateUserAInitAbact7] : Method [POST]\n2019-03-26 00:59:05  DEBUG [AccountAccounttypeHttp17CreateUserAInitAbact7] : Request [{\n  \"accessKey\" : \"Q3Dt41hD\",\n  \"accountType\" : \"Http\",\n  \"allowedRegions\" : [ \"Q3Dt41hD\" ],\n  \"createdBy\" : \"\",\n  \"createdDate\" : \"\",\n  \"id\" : \"\",\n  \"inactive\" : false,\n  \"modifiedBy\" : \"\",\n  \"modifiedDate\" : \"\",\n  \"name\" : \"Q3Dt41hD\",\n  \"org\" : \"\",\n  \"prop1\" : \"Q3Dt41hD\",\n  \"prop2\" : \"Q3Dt41hD\",\n  \"prop3\" : \"Q3Dt41hD\",\n  \"region\" : \"Q3Dt41hD\",\n  \"secretKey\" : \"Q3Dt41hD\",\n  \"version\" : \"\"\n}]\n2019-03-26 00:59:05  DEBUG [AccountAccounttypeHttp17CreateUserAInitAbact7] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlckFAZnhsYWJzLmlvOnVzZXJB]}]\n2019-03-26 00:59:05  DEBUG [AccountAccounttypeHttp17CreateUserAInitAbact7] : Response []\n2019-03-26 00:59:05  DEBUG [AccountAccounttypeHttp17CreateUserAInitAbact7] : Response-Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Tue, 26 Mar 2019 12:59:05 GMT]}]\n2019-03-26 00:59:05  DEBUG [AccountAccounttypeHttp17CreateUserAInitAbact7] : StatusCode [401]\n2019-03-26 00:59:05  DEBUG [AccountAccounttypeHttp17CreateUserAInitAbact7] : Time [3085]\n2019-03-26 00:59:05  DEBUG [AccountAccounttypeHttp17CreateUserAInitAbact7] : Size [0]\n2019-03-26 00:59:05  ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [401 == 200 OR 401 == 201] result [Failed]\n2019-03-26 00:59:05  DEBUG [AccountAccounttypeHttp17CreateUserAInitAbact7_Headers] : Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Tue, 26 Mar 2019 12:59:05 GMT]}]\n2019-03-26 00:59:05  DEBUG [AccountAccounttypeHttp17CreateUserAInitAbact7_Headers] : Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Tue, 26 Mar 2019 12:59:05 GMT]}]\n2019-03-26 00:59:05  DEBUG [AccountAccounttypeHttp17CreateUserAInitAbact7_Headers[2]] : Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Tue, 26 Mar 2019 12:59:05 GMT]}]\n2019-03-26 00:59:05  DEBUG [AccountAccounttypeHttp17CreateUserAInitAbact7_Headers[2]] : Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Tue, 26 Mar 2019 12:59:05 GMT]}]\n2019-03-26 00:59:20  DEBUG [ApiV1AccountsIdPutAccountaccounttypehttpusercDisallowAbact7] : URL [http://13.56.210.25/api/v1/api/v1/accounts/]\n2019-03-26 00:59:20  DEBUG [ApiV1AccountsIdPutAccountaccounttypehttpusercDisallowAbact7] : Method [PUT]\n2019-03-26 00:59:20  DEBUG [ApiV1AccountsIdPutAccountaccounttypehttpusercDisallowAbact7] : Request [{\n  \"accessKey\" : \"UHKd4HIk\",\n  \"accountType\" : \"GitHub\",\n  \"allowedRegions\" : [ \"UHKd4HIk\" ],\n  \"createdBy\" : \"\",\n  \"createdDate\" : \"\",\n  \"id\" : \"\",\n  \"inactive\" : false,\n  \"modifiedBy\" : \"\",\n  \"modifiedDate\" : \"\",\n  \"name\" : \"UHKd4HIk\",\n  \"org\" : {\n    \"createdBy\" : \"\",\n    \"createdDate\" : \"\",\n    \"id\" : \"\",\n    \"inactive\" : false,\n    \"modifiedBy\" : \"\",\n    \"modifiedDate\" : \"\",\n    \"name\" : \"UHKd4HIk\",\n    \"version\" : \"\"\n  },\n  \"prop1\" : \"UHKd4HIk\",\n  \"prop2\" : \"UHKd4HIk\",\n  \"prop3\" : \"UHKd4HIk\",\n  \"region\" : \"UHKd4HIk\",\n  \"secretKey\" : \"UHKd4HIk\",\n  \"version\" : \"\"\n}]\n2019-03-26 00:59:20  DEBUG [ApiV1AccountsIdPutAccountaccounttypehttpusercDisallowAbact7] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlckNAZnhsYWJzLmlvOnVzZXJD]}]\n2019-03-26 00:59:20  DEBUG [ApiV1AccountsIdPutAccountaccounttypehttpusercDisallowAbact7] : Response [I/O error on PUT request for \"http://13.56.210.25/api/v1/api/v1/accounts/\": Read timed out; nested exception is java.net.SocketTimeoutException: Read timed out]\n2019-03-26 00:59:20  DEBUG [ApiV1AccountsIdPutAccountaccounttypehttpusercDisallowAbact7] : Response-Headers [{}]\n2019-03-26 00:59:20  DEBUG [ApiV1AccountsIdPutAccountaccounttypehttpusercDisallowAbact7] : StatusCode [500]\n2019-03-26 00:59:20  DEBUG [ApiV1AccountsIdPutAccountaccounttypehttpusercDisallowAbact7] : Time [15016]\n2019-03-26 00:59:20  DEBUG [ApiV1AccountsIdPutAccountaccounttypehttpusercDisallowAbact7] : Size [159]\n2019-03-26 00:59:20  ERROR [ApiV1AccountsIdPutAccountaccounttypehttpusercDisallowAbact7] : Assertion [@StatusCode == 401 OR @StatusCode == 403] resolved-to [500 == 401 OR 500 == 403] result [Failed]\n2019-03-26 00:59:35  DEBUG [ApiV1AccountsIdDeleteAccountaccounttypehttpabact7] : URL [http://13.56.210.25/api/v1/api/v1/accounts/]\n2019-03-26 00:59:35  DEBUG [ApiV1AccountsIdDeleteAccountaccounttypehttpabact7] : Method [DELETE]\n2019-03-26 00:59:35  DEBUG [ApiV1AccountsIdDeleteAccountaccounttypehttpabact7] : Request [null]\n2019-03-26 00:59:35  DEBUG [ApiV1AccountsIdDeleteAccountaccounttypehttpabact7] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlckFAZnhsYWJzLmlvOnVzZXJB]}]\n2019-03-26 00:59:35  DEBUG [ApiV1AccountsIdDeleteAccountaccounttypehttpabact7] : Response [I/O error on DELETE request for \"http://13.56.210.25/api/v1/api/v1/accounts/\": Read timed out; nested exception is java.net.SocketTimeoutException: Read timed out]\n2019-03-26 00:59:35  DEBUG [ApiV1AccountsIdDeleteAccountaccounttypehttpabact7] : Response-Headers [{}]\n2019-03-26 00:59:35  DEBUG [ApiV1AccountsIdDeleteAccountaccounttypehttpabact7] : StatusCode [500]\n2019-03-26 00:59:35  DEBUG [ApiV1AccountsIdDeleteAccountaccounttypehttpabact7] : Time [15018]\n2019-03-26 00:59:35  DEBUG [ApiV1AccountsIdDeleteAccountaccounttypehttpabact7] : Size [162]\n2019-03-26 00:59:35  ERROR [null] : Assertion [@StatusCode == 200] resolved-to [500 == 200] result [Failed]\n\n--- FX Bot ---"}}
other: {"actor":{"display_login":"humera987"}}