CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Description

The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.

[object Object]

Common consequences

• Integrity,Non-Repudiation,Access Control→Unexpected State,Hide Activities,Bypass Protection Mechanism
  An attacker could create HTTP messages to exploit a number of weaknesses including 1) the message can trick the web server to associate a URL with another URL's webpage and caching the contents of the webpage (web cache poisoning attack), 2

Potential mitigations

• Implementation
  Use a web server that employs a strict HTTP parsing procedure, such as Apache [REF-433].
• Implementation
  Use only SSL communication.
• Implementation
  Terminate the client session after each request.
• System Configuration
  Turn all pages to non-cacheable.

Related CWEs

Recent CVEs classified under this CWE