On this page

Atomicorp WAF Rule 332139

Rule Summary

  • Rule ID: 332139
  • Status: Active
  • Alert message: Atomicorp.com WAF Rules: Suspicious Unusual User Agent (libcurl). Disable this rule if you use libcurl.
  • Observed CWEs: None documented
  • Revision: 4
  • Rule severity: Critical (2)
  • Phase: 2 (request body)
  • Rule action: deny
  • HTTP status: 403
  • Logging: log, auditlog

Description

This rules detects when libcurl based clients connect to the server. Some PCI DSS scanners will fail a site if it does not block this agent.

Disable this rule if you use libcurl.

Troubleshooting

False Positives

None. Disable this rule if you use libcurl.

Tuning Guidance

If you know that this behaviour is acceptable for your site, you can tune it by disabling this rule for the application or virtual host.

If you wish to tune this rule yourself, please see the Tuning the Atomicorp WAF Rules page for basic information.

This is a selected list of documented research observations, not an exhaustive coverage matrix. Absence of a CVE does not imply absence of protection.

No selected related public CVE research notes are currently published.

Documentation Source

  • Original wiki page: WAF 332139
  • Source revision: 4565
  • Source revision date: 2014-03-18