PI32304: AppScan flags 'Database Error Pattern Found' when characters 'sqlnnnn' appear in __ViewState (.NET hidden field)

IBM Security AppScan Enterprise v9.0.2 is now available on Passport Advantage

APAR status

• Closed as fixed if next.

Error description

• AppScan flags 'Database Error Pattern Found' when characters
  'sqlnnnn'  appear in __ViewState (.NET hidden field)
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * ASE 8.8                                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Expected behavior:                                           *
  * AppScan should not detect random strings as SQL error        *
  * pattern                                                      *
  *                                                              *
  * Observed behavior:                                           *
  * A VIEWSTATE Base64 value produced a pattern similar to a     *
  * database error, which caused a false positive.               *
  *                                                              *
  * Workarounds (if applicable):                                 *
  * Disable the test                                             *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels