My Oracle Support Banner

Error [Request Missing an Accept Header] in the Modsec_debugt_ohs Log (Doc ID 2339500.1)

Last updated on MAY 31, 2019

Applies to:

Oracle BigMachines CPQ Cloud Service - Version 2016 R2 and later
Information in this document applies to any platform.

Purpose

The modsec_debugt_ohs.log file is filled with the notice below:

[DD/MM/YYYY:HH:MM:SS +0000][localhost/sid#139d620][rid#7f8258019ff0][/index.html][1] Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/usr/local/oracle_web_tier/instances/cpq_instance/config/OHS/cpq_ohs/mod_security/modsecurity_crs_21_protocol_anomalies.conf"] [line "47"] [id "960015"] [rev "1"] [msg "Request Missing an Accept Header"] [severity "NOTICE"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_ACCEPT"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"]


The same entry is created about every 20 seconds. What is causing these entries?

Details

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Purpose
Details


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.