Oracle HTTP Server Drop HTTP Headers Containing Underscore
(Doc ID 2542618.1)
Last updated on FEBRUARY 02, 2024
Applies to:
Oracle HTTP Server - Version 12.2.1.2.0 and laterOracle Access Manager - Version 11.1.2.3.0 and later
Information in this document applies to any platform.
Symptoms
Oracle HTTP Server is installed.
For authentication Oracle Access Manager is being used.
There is an application that uses CGI and expects to use the OAM headers like,
OAM_REMOTE_USER,
OAM_IDENTITY_ASSERTION
This OHS 12.2.1.x is based on Apache 2.4 and the CGI related modules have new restrictions in the release as described here,
Changes
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Symptoms |
Changes |
Cause |
Solution |