Verification Request Identified

ID

verification_request_identified

Severity

info

Kind

Fingerprinting

CWE

N/A

Description

The given request has been identified as a good candidate for authentication verification. If the request is in a context which has a Verification Strategy set to "Poll" but where the URL is empty then this rule will fill in the correct values.

Rationale

This is not a security vulnerability but an informational finding to assist with authentication testing configuration. The detector identifies endpoints that are suitable for verifying whether a session is still authenticated during automated security scans. This helps testers configure polling-based verification strategies to ensure scans maintain authenticated state throughout the testing process. No exploitation vector exists as this finding serves a diagnostic purpose for the security testing tool itself.

Remediation

This is an informational alert rather than a vulnerability and so there is nothing to fix.

References