News informations (#53)

* News informations

Informations about SPIP, GLPI and PACS NGI GXD5

* Update chopchop.yml

News informations added :

AudioCodes SIP Gateway
Xerox Printer
Lexmark Printer
Aklia Lisis

chopchop.yml

@@ -755,3 +755,107 @@ plugins:
         status_code: 200
         severity: "Low"
         tested: true
+  - uri: "/spip.php?page=login"
+    checks:
+      - name : SPIP admin interface
+        match:
+          - 'content="SPIP'
+        remediation: Make sure that SPIP admin interface access is restricted & monitored
+        description: SPIP admin interface is accessible
+        status_code: 200
+        severity: "Informational"
+        tested: true
+  - uri: "/spip.php?page=login"
+    checks:
+      - name : SPIP vulnerable version
+        match:
+          - 'content="SPIP'
+        no_match :
+          - '3.2.4-1+deb10u3'
+          - '3.2.8'
+          - '3.1.14'
+          - '3.1.4-4~deb9u3build0.18.04.1'
+        remediation: Upgrade SPIP in latest version
+        description: SPIP vulnerable version detected
+        status_code: 200
+        severity: "High"
+        tested: true
+  - uri: "/"
+    checks:
+      - name : GLPI
+        match:
+          - '<title>GLPI - Authentification</title>'
+          - 'title="Powered by Teclib and contributors" class="copyright">GLPI Copyright'
+        remediation: Make sure that GLPI access is restricted & monitored
+        description: GLPI detected
+        status_code: 200
+        severity: "Informational"
+        tested: true
+  - uri: "/"
+    checks:
+      - name : GLPI vulnerable version
+        match:
+          - '<title>GLPI - Authentification</title>'
+          - 'title="Powered by Teclib and contributors" class="copyright">GLPI Copyright'
+        no_match :
+          - 'src="/public/lib/base.min.js?v=9.5.3"'
+        remediation: Upgrade GLPI in latest version
+        description: GLPI vulnerable version detected
+        status_code: 200
+        severity: "High"
+        tested: true
+  - uri: "/"
+    checks:
+      - name : PACS NGI GXD5
+        match:
+          - '<title>GXD5 Pacs Connexion utilisateur</title>'
+        remediation: Make sure that PACS NGI GXD5 access is restricted & monitored
+        description: PACS NGI GXD5 detected
+        status_code: 200
+        severity: "High"
+        tested: true
+  - uri: "/"
+    checks:
+      - name: AudioCodes SIP Gateway
+        match:
+        - 'AudioCodes'
+        - '<H2>Web Login</H2>'
+        remediation: Make sure that AudioCodes SIP Gateway access is restricted & monitored
+        description: AudioCodes SIP Gateway detected
+        severity: "Informational"
+        tested: true
+  - uri: "/support/support.php"
+    checks:
+      - name : Xerox Printer
+        headers:
+          - "Server:Apache"
+        match:
+          - 'Xerox Corporation'
+        remediation: Make sure that Xerox Printer access is restricted & monitored
+        description: Xerox Printer is accessible
+        status_code: 200
+        severity: "Low"
+        tested: true
+  - uri: "/cgi-bin/dynamic/topbar.html"
+    checks:
+      - name : Lexmark Printer
+        match:
+          - '<span class="top_prodname">Lexmark'
+
+        remediation: Make sure that Lexmark Printer access is restricted & monitored
+        description: Lexmark Printer is accessible
+        status_code: 200
+        severity: "Low"
+        tested: true
+  - uri: "/felia/user/signin?source="
+    checks:
+      - name : Aklia Lisis - traçabilité patients
+        match:
+        - 'images/logos/logo-aklia-screen.png'
+        - 'utilisateur</label>'
+        - 'LISIS</title>'
+        remediation: Make sure that Aklia Lisis access is restricted & monitored
+        description: Aklia Lisis is accessible
+        status_code: 200
+        severity: "Low"
+        tested: true