Big news! The community will be moving to a new platform April 21. Read more.
Big news! The community will be moving to a new platform April 21. Read more.
Cadet 3rd Class
Cadet 3rd Class
4613 views

WebInspect 17.20 SSL Error

I getting this "Error Audit Engine error: session:3734CF3AE12E9ABAB6EC673C74BCE67D, CheckID:11201, engine:SPI.Scanners.Web.Audit.Engines.Adaptive.SessionFixation:SmartMode:NonServerSpecificOnly,EngineCheckID:11201,EngineID:e1dd8d6e-b22e-4227-9154-7b5646f775f6, error:Index was out of range. Must be non-negative and less than the size of the collection." Any ideas on how to troubleshoot this error. 

0 Likes
1 Reply
Micro Focus Expert
Micro Focus Expert

This likely appeared in the Scan Log where messages and errors occur during the scan.  It could just be a single, momentary error that dropped that one probe or single session and will not affect the rest of your scan.  This particular error specifies the Check 11201 ("Session Fixation").  Normally, you can ignore these individual errors in a scan as network noise.  If they build up dramatically in quantity, you may need to run a Repair on your WebInspect installation, and/or contact Fortify Support (softwaresupport.softwaregrp.com).  If the scan crashes due to it, then you can disable that particular check in a custom scan Policy and still run scans using that Policy while you sort our the cause and fix with Fortify Support separately.


-- Habeas Data
Micro Focus Fortify Customers-Only Forums – https://community.softwaregrp.com/t5/Fortify/ct-p/fortify
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.