View source for WAF 300114

'''Rule ID''' 

300114

'''Alert Message'''  

Atomicorp.com WAF Rules: HTTP Smuggling Attack: Inconsistent Content-Length and Transfer-Encoding headers detected

HTTP Smuggling Attack.

'''Description'''  

This rule detects if Content-Length and Content-Encoding chunked or identity type headers are set on a request.  There is no legitimate traffic that uses this method, this is an attack.

'''False Positives'''

There are no known False Positives for this.  

If you believe this is a false positive, it is recommended that you report this to our security team can determine if this is a legitimate case, or if its clever attack on your system.  Instructions to report false positives are detailed on the [[Reporting False Positives]] wiki page.

'''Similar Rules'''

[[WAF_300113]]

[[WAF_300112]]

[[WAF_300111]]

'''Outside References'''