QID 150565

Date Published: 2022-09-30

QID 150565: Custom Error Page Detected

A custom Error Page can be set using a url or a custom regex in the WAS scan configuration. WAS will use the custom error set to compare against responses for 150004 Path-Based Vulnerability and 150174 Path Traversal Vulnerability and further filter responses that match the custom Error Page. If there is a match then respective vulnerabilities will not be reported. Using the URL option will set the error page as the response received. WAS will use the response from the URL to make an exact match (including spaces and tags) in order to filter out detections for 150004 and 150174. The URL set must be in scope for WAS to be able to set the error page. For the regex option make sure the regex is strict enough to catch the custom error page and not detect valid responses. Using a wildcard regex (.*) is a valid regex but not recommended for use with this configuration, since it will lead to filtering all 150004 and 150174 (potential true vulnerabilities).

N/A

Solution

N/A

Vendor References

CVEs related to QID 150565

Software Advisories

Advisory ID	Software	Component	Link

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].