Forum Discussion
Parveez_70209
Nimbostratus
Aug 09, 2014Vulnerability : "WebDAV extensions are enabled"" : Suggestion Needed
Hi Team,
Need suggestion related to Vulnerability : "WebDAV extensions are enabled".
As Web-based Distributed Authoring and Version (WebDAV) is a set of extensions to the HTTP/1.1 protocol ...
IheartF5_45022
Nacreous
Aug 12, 2014Hi again - the above will ensure that WebDav functionality works, however if what you are trying to do is to remove the vulnerability and disable WebDav, then you will want to block any WebDav requests;-
when HTTP_REQUEST {
switch [HTTP::method] {
"GET" -
"POST" -
"HEAD" {
Allowed methods - do nothing
}
default {
HTTP::respond 405 content "Method not allowed"
return
}
}
}
This will mean that wehn you re-run your scan you will not get pinged on WebDav (but obviously this depends on your business requirement).
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
