HTTP Request Smuggling | Techzone

▤ Summary

Web application firewalls deployed as reverse proxies like Airlock WAF are potentially affected by these attack techniques. Request smuggling vulnerabilities are often critical in nature, allowing an attacker to bypass security controls, gain unauthorized access to sensitive data, and directly compromise other application users [1]. Examples of such attack techniques include malformed HTTP headers or illegal combination of Content-Length and Transfer-Encoding headers in an HTTP requests [1]. Airlock WAF uses different, encapsulated software stacks for reading and reconstruction of HTTP requests. This architecture prevents common protocol-level attacks like HTTP requests smuggling or HTTP response splitting.

▦ Linked Companies

Ergon Informatik AG

$10M to $25M