Verification Request Identified
ID |
verification_request_identified |
Severity |
info |
Kind |
Fingerprinting |
CWE |
N/A |
Description
The given request has been identified as a good candidate for authentication verification. If the request is in a context which has a Verification Strategy set to "Poll" but where the URL is empty then this rule will fill in the correct values.
Rationale
This is not a security vulnerability but an informational finding to assist with authentication testing configuration. The detector identifies endpoints that are suitable for verifying whether a session is still authenticated during automated security scans. This helps testers configure polling-based verification strategies to ensure scans maintain authenticated state throughout the testing process. No exploitation vector exists as this finding serves a diagnostic purpose for the security testing tool itself.
Remediation
This is an informational alert rather than a vulnerability and so there is nothing to fix.