On this page

Atomicorp WAF Rule 320464

Rule Summary

  • Rule ID: 320464
  • Status: Active
  • Alert message: Atomicorp.com WAF Rules: Protected Path Access denied in URI/ARGS
  • Observed CWEs: CWE-20 (1), CWE-22 (1), CWE-79 (1), CWE-89 (1), CWE-601 (1), CWE-798 (1), CWE-862 (1)
  • Revision: 2
  • Rule severity: Critical (2)
  • Phase: 2 (request body)
  • Request surfaces: Request headers, Request arguments, JSON request data, SOAP request data
  • Rule action: deny
  • HTTP status: 403
  • Logging: log, auditlog

Description

This rule detects behavior identified by its current alert as “Protected Path Access denied in URI/ARGS” in the request headers, request arguments, JSON request data, SOAP request data. It evaluates during the request body phase and denies matching traffic with HTTP status 403.

This is a selected list of documented research observations, not an exhaustive coverage matrix. Absence of a CVE does not imply absence of protection.

CVEVulnerabilityProductCVSSSeverity
CVE-2015-4664Xceedium Xsuite - Multiple Vulnerabilitiesprivileged access manager9.8 (v3.0)Critical
CVE-2015-4667Xceedium Xsuite - Multiple Vulnerabilitiesxsuite9.8 (v3.0)Critical
CVE-2021-45467Control Web Panel (CWP) - File Inclusionwebpanel9.8 (v3.1)Critical
CVE-2015-4669Xceedium Xsuite - Multiple Vulnerabilitiesxsuite7.8 (v3.0)High
CVE-2015-4668Xceedium Xsuite - Multiple Vulnerabilitiesxsuite6.1 (v3.0)Medium
CVE-2015-4666Xceedium Xsuite - Multiple Vulnerabilitiesxsuite5.0 (v2.0)Medium
CVE-2015-4665Xceedium Xsuite - Multiple Vulnerabilitiesxsuite4.3 (v2.0)Medium

Observed CWEs

These CWEs are recorded on published CVEs in the selected observations associated with this rule. They are observational relationships, not a claim that the rule universally blocks every vulnerability assigned to a CWE.

CWERelated Published CVEs
CWE-20CVE-2015-4664
CWE-22CVE-2015-4666
CWE-79CVE-2015-4665
CWE-89CVE-2015-4669
CWE-601CVE-2015-4668
CWE-798CVE-2015-4667
CWE-862CVE-2021-45467