GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d63e930952d0dcbfa2c8ff28f32b970d8457008d26
GraphQL introspection enabled at /api/graphql Types: 600 (by kind: ENUM: 58, INPUT_OBJECT: 144, INTERFACE: 30, OBJECT: 363, SCALAR: 5) Operations: - Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories - Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addGiftRegistryRegistrants, addProductsToCart Directives: deprecated, include, oneOf, skip (total: 4)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d63e930952d0dcbfa2c8ff28f32b970d848a2919d5
GraphQL introspection enabled at /api/graphql Types: 600 (by kind: ENUM: 58, INPUT_OBJECT: 144, INTERFACE: 30, OBJECT: 363, SCALAR: 5) Operations: - Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories - Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addGiftRegistryRegistrants, addProductsToCart Directives: deprecated, include, oneOf, skip (total: 4) Detected: Magento
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
GraphQL introspection enabled at /api/graphql
Open service 151.101.195.10:443 · dev.ibcmed.com
2026-01-23 10:27
HTTP/1.1 401 Unauthorized Connection: close Content-Length: 381 x-frame-options: SAMEORIGIN www-authenticate: Basic realm="Authentication Required" content-type: text/html; charset=iso-8859-1 Accept-Ranges: bytes Date: Fri, 23 Jan 2026 10:27:28 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="6015dd0912118015"; Path=/; HttpOnly; secure X-Served-By: cache-lga21989-LGA X-Cache: MISS X-Timer: S1769164048.349857,VS0,VS0,VE15 Page title: 401 Unauthorized <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Unauthorized</title> </head><body> <h1>Unauthorized</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html>
Open service 151.101.131.10:80 · dev.ibcmed.com
2026-01-12 10:44
HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Retry-After: 0 Location: https://dev.ibcmed.com/ Accept-Ranges: bytes Date: Mon, 12 Jan 2026 10:44:30 GMT Strict-Transport-Security: max-age=31557600 X-Served-By: cache-rtm-ehrd2290020-RTM X-Cache: HIT X-Timer: S1768214670.233631,VS0,VE1
Open service 151.101.131.10:443 · dev.ibcmed.com
2026-01-12 10:44
HTTP/1.1 401 Unauthorized Connection: close Content-Length: 381 x-frame-options: SAMEORIGIN www-authenticate: Basic realm="Authentication Required" content-type: text/html; charset=iso-8859-1 Accept-Ranges: bytes Date: Mon, 12 Jan 2026 10:44:30 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="9146c35518e7d08f"; Path=/; HttpOnly; secure X-Served-By: cache-rtm-ehrd2290023-RTM X-Cache: MISS X-Timer: S1768214671.662051,VS0,VS0,VE92 Page title: 401 Unauthorized <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Unauthorized</title> </head><body> <h1>Unauthorized</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html>
Open service 151.101.195.10:80 · dev.ibcmed.com
2026-01-12 10:44
HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Retry-After: 0 Location: https://dev.ibcmed.com/ Accept-Ranges: bytes Date: Mon, 12 Jan 2026 10:44:30 GMT Strict-Transport-Security: max-age=31557600 X-Served-By: cache-lcy-egml8630065-LCY X-Cache: HIT X-Timer: S1768214670.150732,VS0,VE1
Open service 151.101.195.10:443 · dev.ibcmed.com
2026-01-12 10:44
HTTP/1.1 401 Unauthorized Connection: close Content-Length: 381 x-frame-options: SAMEORIGIN www-authenticate: Basic realm="Authentication Required" content-type: text/html; charset=iso-8859-1 Accept-Ranges: bytes Date: Mon, 12 Jan 2026 10:44:30 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="9146c35518e7d08f"; Path=/; HttpOnly; secure X-Served-By: cache-rtm-ehrd2290047-RTM X-Cache: MISS X-Timer: S1768214671.556999,VS0,VS0,VE91 Page title: 401 Unauthorized <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Unauthorized</title> </head><body> <h1>Unauthorized</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html>
Open service 151.101.3.10:80 · dev.ibcmed.com
2026-01-12 10:44
HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Retry-After: 0 Location: https://dev.ibcmed.com/ Accept-Ranges: bytes Date: Mon, 12 Jan 2026 10:44:30 GMT Strict-Transport-Security: max-age=31557600 X-Served-By: cache-vie6324-VIE X-Cache: HIT X-Timer: S1768214670.139215,VS0,VE102
Open service 151.101.3.10:443 · dev.ibcmed.com
2026-01-12 10:44
HTTP/1.1 401 Unauthorized Connection: close Content-Length: 381 x-frame-options: SAMEORIGIN www-authenticate: Basic realm="Authentication Required" content-type: text/html; charset=iso-8859-1 Accept-Ranges: bytes Date: Mon, 12 Jan 2026 10:44:31 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="ba14dc6fe2074955"; Path=/; HttpOnly; secure X-Served-By: cache-lon4248-LON X-Cache: MISS X-Timer: S1768214671.659056,VS0,VS0,VE411 Page title: 401 Unauthorized <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Unauthorized</title> </head><body> <h1>Unauthorized</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html>
Open service 151.101.67.10:443 · dev.ibcmed.com
2026-01-12 10:44
HTTP/1.1 401 Unauthorized Connection: close Content-Length: 381 x-frame-options: SAMEORIGIN www-authenticate: Basic realm="Authentication Required" content-type: text/html; charset=iso-8859-1 Accept-Ranges: bytes Date: Mon, 12 Jan 2026 10:44:30 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="9146c35518e7d08f"; Path=/; HttpOnly; secure X-Served-By: cache-rtm-ehrd2290025-RTM X-Cache: MISS X-Timer: S1768214671.799331,VS0,VS0,VE91 Page title: 401 Unauthorized <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Unauthorized</title> </head><body> <h1>Unauthorized</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html>
Open service 151.101.67.10:80 · dev.ibcmed.com
2026-01-12 10:44
HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Retry-After: 0 Location: https://dev.ibcmed.com/ Accept-Ranges: bytes Date: Mon, 12 Jan 2026 10:44:30 GMT Strict-Transport-Security: max-age=31557600 X-Served-By: cache-rtm-ehrd2290024-RTM X-Cache: HIT X-Timer: S1768214670.002018,VS0,VE1
Open service 151.101.195.10:443 · dev.ibcmed.com
2026-01-09 21:23
HTTP/1.1 401 Unauthorized Connection: close Content-Length: 381 x-frame-options: SAMEORIGIN www-authenticate: Basic realm="Authentication Required" content-type: text/html; charset=iso-8859-1 Accept-Ranges: bytes Date: Fri, 09 Jan 2026 21:23:38 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="80e4da49680004ae"; Path=/; HttpOnly; secure X-Served-By: cache-lcy-egml8630043-LCY X-Cache: MISS X-Timer: S1767993819.510530,VS0,VS0,VE152 Page title: 401 Unauthorized <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Unauthorized</title> </head><body> <h1>Unauthorized</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html>