Suspected CGI Generic SQL Injection vulnerability in DLP

Products

• Data Loss Prevention
• Data Loss Prevention Enforce

Issue/Introduction

A security scan returns a suspected vulnerability on the Data Loss Prevention (DLP) Enforce server.

 

 

Environment

Release: 15.8

Component: Enforce

Resolution

DLP is not vulnerable to CGI scrips as there are no CGI scripts on the Enforce server.
The finding is a false positive.