Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

cPanel and its GET /whm-server-status

See original GitHub issue

_Issue originally created by user CanadianJeff on date 2016-10-19 20:25:17. Link to original issue: https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/620._

{
"type": "The rule generates false positive hit entries",
"rule_text": "SecRule &REQUEST_HEADERS:User-Agent \"@eq 0\" \"msg:'Request Missing a User Agent Header', severity:'NOTICE', phase:request, rev:'1', ver:'OWASP_CRS/3.0.0', maturity:'9', accuracy:'9', t:none, pass, id:'960009', tag:'application-multi', tag:'language-multi', tag:'platform-multi', tag:'attack-protocol', tag:'OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_UA', tag:'WASCTC/WASC-21', tag:'OWASP_TOP_10/A7', tag:'PCI/6.5.10', setvar:'tx.msg=%{rule.msg}', setvar:tx.anomaly_score=+%{tx.notice_anomaly_score}, setvar:tx.%{rule.id}-OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER-%{matched_var_name}=%{matched_var}, skipAfter:END_UA_CHECK\"\n",
"hits": [
{
"meta_offset": "0",
"http_version": "HTTP/1.0",
"meta_line": "317",
"meta_logdata": null,
"http_method": "GET",
"meta_severity": "NOTICE",
"timezone": "-420",
"meta_msg": "Request Missing a User Agent Header",
"http_status": "403",
"meta_file": "/etc/apache2/conf.d/modsec_vendor_configs/OWASP/rules/REQUEST-20-PROTOCOL-ENFORCEMENT.conf",
"justification": "Operator EQ matched 0 at REQUEST_HEADERS.",
"meta_id": "960009",
"meta_rev": "1",
"id": "1018",
"action_desc": "Warning.",
"path": "/whm-server-status",
"ip": "127.0.0.1",
"timestamp": "2016-10-19 09:05:02",
"host": null,
"meta_uri": null,
"handler": "server-status"
}
],
"message": "cpanel/whm automated requests trigger this"
}

Issue Analytics

State:
Created 3 years ago
Comments:5

Top GitHub Comments

1reaction

CRS-migration-botcommented, May 13, 2020

User CanadianJeff commented on date 2016-10-20 21:07:22:

alot of noise yes

0reactions

CRS-migration-botcommented, May 13, 2020

User csanders-git commented on date 2016-10-22 02:18:21:

Yes I am in contact with them, i’ll see if we can get a test account.

Top Results From Across the Web

Server Status - cPanel & WHM Documentation

This interface displays the status of your Apache server. ... This feature displays information about your server's consumption of processing power and ...

How to check your WHM server's status and information

Let's take a look at the Server Status ; 1) Click the Service Status ; Here you will find a list of services...

How to check server status and information in WHM? - ZNetLive

How to adjust cPanel & WHM's Update Preferences? How to change the default home directory in WHM ? How to configure the statistics...

How to Check Server Status in WHM cPanel - rackAID

You can check your the status of your cPanel server by using the server status pages in WHM. The server status will tell...

cPanel and its GET /whm-server-status · Issue #1232 - GitHub

cPanel and its GET /whm-server-status #1232. Closed. CanadianJeff opened this issue on Oct 19, 2016 · 3 comments.