WAF 361010
Rule ID
361010
Status
Active rule currently published.
Alert Message
Atomicorp.com WAF Rules: Potential credit card number detected in output (NOT BLOCKED) -American Express Credit Card Number sent from site to user
Description
This rule detects potential credit card numbers being displayed by the web server. The intent of this rule is to detect these cases, as this may be acceptable for some applications. This rule does not block or obfuscate these numbers, it merely reports that this may have occurred.
Users should investigate this alert to determine if a credit card number has been displayed, and if this action is unauthorized.
False Positives
A false positive can occur when an application legitimately displays a credit card number, or if an application happens to use a number that looks identical to a valid credit card number.
It is not recommended that you disable this rule if you have a false positive. If you believe this is a false positive, please report this to our security team to determine if this is a legitimate case, or if its clever attack on your system. Instructions to report false positives are detailed on the Reporting False Positives wiki page. If it is a false positive, we will fix the issue in the rules and get a release out to you promptly.
Tuning Guidance
Please see the Tuning the Atomicorp WAF Rules page for basic information.
Similar Rules
Knowledge Base Articles
None.
Outside References
None.
