ASM information leakage category attack type

Based on your screenshot my wildest guess would be that your persistence cookie isn't encrypted and has the default name. (and that it is leaking the internal ip address and server port)

 

I can tell your internal server listens on port 443 and it's ip address end's with .152

 

The ASM could see this as information leaking.

 

Cheers,

 

Kees

 

Sai,

 

If you enable cookie encryption on the cookie persistence profile, does this mitigate the information leaking?

 

Cheers,

 

Kees