| Details | |
|---|---|
| Alert ID | 90028-4 |
| Alert Type | Active |
| Status | beta |
| Risk | Medium |
| CWE | 749 |
| WASC | 45 |
| Technologies Targeted | All |
| Tags |
CWE-749 OWASP_2017_A06 OWASP_2021_A05 OWASP_2025_A02 POLICY_DEV_FULL POLICY_PENTEST POLICY_QA_FULL WSTG-V42-CONF-06 |
| More Info |
Scan Rule Help |
Summary
The insecure HTTP method [CONNECT] is enabled for this resource, and is exploitable. It was found to be possible to establish a tunneled socket connection to a third party service, using this HTTP method. This would allow the service to be used as an anonymous spam relay, or as a web proxy, bypassing network restrictions. It also allows it to be used to establish a tunneled VPN, effectively extending the network perimeter to include untrusted components.