90026—SOAP Action Spoofing

PUBLISHEDsecurity alertHigh

Active

Metadata

Alert ID:: 90026
Risk:: High
Type:: Active

摘要

An unintended SOAP operation was executed by the server.

解决方案

If not required, the SOAPAction attribute should be disabled. If needed, the operation within the SOAPAction and the SOAP body should always be compared before executing any operation. Any mismatch should be regarded as an attack.

其他信息

An unintended SOAP operation was executed by the server.

参考

browse all alerts