Cortex CloudApplication Security
OpenAPI Security requirement not defined in the security definitions misconfiguration detected in co
Rule Details
Cortex AppSec Rule ID
APPSEC_OPENAPI_6
Category - Subcategory
Public Exposure - APIs
Provider
OTHER
Severity
HIGH
Framework
OpenAPI
Impact
Security definitions in the security section of a path or root should refer to an authentication scheme identified in the securityDefinitions section.
How to Fix
OpenAPI
Example:
...
security:
- petstore_auth:
- write:pets
- read:pets
...PreviousOpenAPI Security object for operations, if defined, must define a security scheme, otherwise it shou
NextAPI spec includes a 'password' flow in OAuth2 authentication misconfiguration detected in code
Last updated
Was this helpful?