PM89538: ASE: Login Redirect can cause the login to replay when not necessary

APAR status

• Closed as program error.

Error description

• Description:
  
  When playing back a login, AppScan Enterprise may replay the
  login multiple times when for a site having a redirect for the
  login.
  
  Workaround:
  
  To workaround this issue, clicking deeper in to the application
  so that 2 http 200 OKs are seen and selecting the 2nd for the
  in-session detection should workaround the issue.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  ASE: Login Redirect can cause the login to replay when not
  necessary
  
  Scan option RETRIEVE_INLINE_REQUESTS_DURING_LOGIN  is set to
  FALSE to fix this
  

Problem conclusion

• Fixed in IBM Security AppScan Enterprise Edition 8.7.0.1
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SEC APPSCAN ENT

• Fixed component ID

  5724T5200

Applicable component levels

• R870 PSN

     UP