|
CONFIDENTIAL |
|
|
Scan Summary · 2026-10-07
Vulnerability findings for overwatch.overdrive.co.za
https://overwatch.overdrive.co.za/ · 100.63.22.229
|
|
The latest scan identified 18 findings across the public-facing infrastructure. No critical or high-severity issues were observed in this run. 1 medium-severity item(s) should be scheduled for the next change window. Low: 10, Informational: 7.
|
|
Critical
0
|
High
0
|
Medium
1
|
Low
10
|
Info
7
|
|
|
REPORT 0c8c0a6d
|
SCAN 07:09 UTC
|
TOOLS httpx · nmap · zap
|
|
| Medium severity |
1 FINDINGS |
|
|
| M-01 |
Content Security Policy (CSP) Header Not Set
— · 3 instance(s)
|
Medium
|
|
|
|
| L-01 |
Cookie No HttpOnly Flag
— · 2 instance(s)
|
Low
|
|
| L-02 |
Cookie Without Secure Flag
— · 1 instance(s)
|
Low
|
|
| L-03 |
Cookie with SameSite Attribute None
— · 1 instance(s)
|
Low
|
|
| L-04 |
Cookie without SameSite Attribute
— · 1 instance(s)
|
Low
|
|
| L-05 |
Cross-Origin-Embedder-Policy Header Missing or Invalid
— · 1 instance(s)
|
Low
|
|
| L-06 |
Cross-Origin-Opener-Policy Header Missing or Invalid
— · 1 instance(s)
|
Low
|
|
| L-07 |
Cross-Origin-Resource-Policy Header Missing or Invalid
— · 1 instance(s)
|
Low
|
|
| L-08 |
Permissions Policy Header Not Set
— · 3 instance(s)
|
Low
|
|
| L-09 |
Server Leaks Version Information via "Server" HTTP Response Header Field
— · 3 instance(s)
|
Low
|
|
| L-10 |
Strict-Transport-Security Header Not Set
— · 3 instance(s)
|
Low
|
|
|
|
| 1 network observation(s) on 100.63.22.229: https/443 plus httpx (1). |
|
This message contains confidential security information.
Do not forward outside the intended recipient list. |
REPORT 0c8c0a6d
2026-10-07 |
|