Active rule currently published.
Atomicorp.com WAF Rules: Potential credit card number detected in output (NOT BLOCKED) -Diners Club Credit Card Number sent from site to user
This rule detects potential credit card numbers being displayed by the web server. The intent of this rule is to detect these cases, as this may be acceptable for some applications. This rule does not block or obfuscate these numbers, it merely reports that this may have occurred.
Users should investigate this alert to determine if a credit card number has been displayed, and if this action is unauthorized.
A false positive can occur when an application legitimately displays a credit card number, or if an application happens to use a number that looks identical to a valid credit card number.
It is not recommended that you disable this rule if you have a false positive. If you believe this is a false positive, please report this to our security team to determine if this is a legitimate case, or if its clever attack on your system. Instructions to report false positives are detailed on the Reporting False Positives wiki page. If it is a false positive, we will fix the issue in the rules and get a release out to you promptly.
Please see the Tuning the Atomicorp WAF Rules page for basic information.
Knowledge Base Articles