I'm trying to get list of the users/accounts registered on McAfee SIEM.
There is a great endpoint in API, but it's not working as it should.
I'm talking about <esm_ip>/rs/esm/help/commands/userGetUserList
Endpoint needs user password in the url. /rs/esm/userGetUserList?authPW=(authPW)
It should be fixed.
first of all it's not safe, second of all since all passwords has to contain at least one special character. So it seems that this endpoint will be broken for every user.
Did someone manage to get such a list? Using API or it can be even extracted manually from the mcafee esm console.
thanks in advance
On 10.1.2 its "fixed" - Password is removed from query in url,
but still I cannot understand why password has to be send in the body of the POST request..