Forum Discussion

Sergio_Magra's avatar
Sergio_Magra
Icon for Nimbostratus rankNimbostratus
Feb 19, 2013

Filename is seeing as parameter and applied a SQL Injection signature

Hi, the ASM (9.4.4) have a false positive by detecting the filenames as parameter and applying the following SQL injection signature:   False Positive: SQL-INJ "--" (SQL comment) (Parameter)   ...
app sec
BIG-IP Access Policy Manager (APM)
security
Sergio_Magra's avatar
Sergio_Magra
Icon for Nimbostratus rankNimbostratus
Feb 21, 2013

Thanks for the answer.

 

 

But, if it is not a parameter, I will need to disable the signature globally?

 

On the other hand, could it have relationship with defining the parameter as binary in order to avoid being scanned?

 

 

 

Thanks and Best regards