CVE-2018-11759-Apache mod_jk access control bypass.bcheck

metadata:
    language: v2-beta
    name: "CVE-2018-11759 - Apache mod_jk access control bypass"
    description: "Checks for CVE-2018-11759 -Apache mod_jk access control bypass"
    author: "CDonkin"
    tags: "CVE-2018-11759", "mod_jk"

run for each:
    potential_path =
        "/jkstatus",
        "/jkstatus;"

given host then
    send request called check:
        method: "GET"
        path: {potential_path}

    if "JK Status Manager" in {check.response.body} then
        report issue:
            severity: high
            confidence: certain
            detail: `jkstatus found at {potential_path}.`
            remediation: "Apply the relevant patches"
    end if