light review changes

rapid7 · Sep 11, 2023 · 2ed001c · 2ed001c
1 parent 235c142
commit 2ed001c
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/...iliary/gather/apache_superset_priv_esc.md → ...er/apache_superset_cookie_sig_priv_esc.md b/...iliary/gather/apache_superset_priv_esc.md → ...er/apache_superset_cookie_sig_priv_esc.md
@@ -21,7 +21,7 @@ sudo docker exec -it superset superset db upgrade
 sudo docker exec -it superset superset init
 ```
 
-Login to the app, click 'list users' under 'Settings', then click '+'.  make a new user with 'public' as the permission level.
+Login to the app, click 'list users' under 'Settings', then click '+'.  make a new user with 'Public' as the role.
 
 If you want any database credentials to be pulled, you'll need to configure a database as well.
 

diff --git a/...iliary/gather/apache_superset_priv_esc.rb → ...er/apache_superset_cookie_sig_priv_esc.rb b/...iliary/gather/apache_superset_priv_esc.rb → ...er/apache_superset_cookie_sig_priv_esc.rb
@@ -65,7 +65,7 @@ def check
 
     version = Rex::Version.new(Regexp.last_match(1))
     if version < Rex::Version.new('2.0.1') && version >= Rex::Version.new('1.4.1')
-      Exploit::CheckCode::Vulnerable("Apache Supset #{version} is vulnerable")
+      Exploit::CheckCode::Appears("Apache Supset #{version} is vulnerable")
     else
       Exploit::CheckCode::Safe("Apache Supset #{version} is NOT vulnerable")
     end