Domain api.cmply.altavec.com
Australia
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2026-01-04 00:06
Last seen 2026-01-09 19:35
Open for 5 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354910644b845b692a8244b7b53f480e545ee97314fbPublic Swagger UI/API detected at path: /swagger/index.html - sample paths: DELETE /ManagementArea/load/{managementAreaLoadId} DELETE /NetworkShapefile/deleteshapefileload/{fileId} DELETE /Region/role/{roleId} GET /Authorisation GET /Cycle/getOrgCycles GET /Cycle/roles GET /Dashboard/managementAreasPerRegion/{cycleId} GET /ManagementArea/cycle/{cycleId} GET /ManagementArea/detail/{managementAreaId} GET /ManagementArea/extent/{managementAreaId} GET /ManagementArea/managementAreaTypesFromProgramManagementAreas/{cycleId} GET /ManagementArea/types/{cycleId} GET /Map/wmsBase64 GET /NetworkShapefile/getShapefileDataSearchAttributeKeysByFileId/{fileId} GET /NetworkShapefile/getShapefileLayers GET /NetworkShapefile/layers/{organisationId} GET /Preference GET /Program/cycle/{cycleId} GET /Program/programDetail/{programId}/{managementAreaId} GET /Program/programNameProgramType/{cycleId} GET /Program/programTypes GET /Program/programsByManagementAreaId/{managementAreaId} GET /Region/cycle/{cycleId} GET /Region/organisation/{organisationId} GET /Region/regionFromProgramManagementAreas/{cycleId} GET /Report/tableau POST /Asset/fetch POST /Cycle/create POST /Cycle/update POST /Dashboard/assetTasks POST /Dashboard/programManagementAreas POST /Dashboard/spanPerformanceValues POST /ManagementArea/load POST /NetworkShapefile/fetchShapefilesByShapefileDataIds POST /NetworkShapefile/load POST /NetworkShapefile/updateshapefileload POST /Region/create POST /Region/roleRegion/{roleId} POST /Region/roleRegionCycle POST /Search/create POST /Search/fetchFound on 2026-01-09 19:35
-
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
IP: 52.63.227.249
Domain: contractor.api.cmply.altavec.com
Port: 443
URL: https://contractor.api.cmply.altavec.comFirst seen 2026-01-04 00:06-
Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493c09a6c660038f3bc14fd59fc96f90ea22682d01Public Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /Asset/types GET /Program GET /Program/ManagementArea GET /Program/ManagementAreas GET /Task/approval/status GET /Task/company GET /Task/types POST /Asset POST /Task PUT /ProgramAsset/updateClearOfHazardAndCompletionDate
Found on 2026-01-04 00:06
-