AppScan 8.0.3 Security Vulnerability Scan Summary

This document documents the security vulnerabilities and solutions for scanning through the AppScan 8.0.3 tool,

1. Authentication bypass using SQL injection

Problem Description:

Solution:

It is generally filtered by xssfilter filter, and some key characters are filtered through xssfiiter. You can refer to the blog

2. Decrypted Login Request

Typically handled by configuring SSL for WebLogic

Problem Description:

Solution:

Configure the server so that it can be accessed with SSL, you can refer to the blog post

3. Cross-site access

Problem Description:

Solution:

Generally filter by Csrffilter filter, you can refer to the blog post

4. Insufficient account closure

Problem Description:

Solution:  

You cannot log on by configuring user lock

5. Login error Message Credential enumeration

Problem Description:

Solution:

Each logon failure error message is the same, for example, the user name or password error, through such a prompt to deal with the problem.

AppScan 8.0.3 Security Vulnerability Scan Summary