Fortinet black logo

20000043

Copy Link
Copy Doc ID c3a575a0-3c3d-11ea-9384-00505692583a:292292
Download PDF

20000043

Meaning

JSON validation security violation.

Field name Description

log_id

20000043

See Log ID numbers.

main_type

JSON Validation Security

subtype

  • JSON Schema Validation Violation
  • JSON Format Invalid Violation
  • JSON Data Size Violation
  • JSON Key Size Violation
  • JSON Key Number Violation
  • JSON Value Size Violation
  • JSON Value Number Violation
  • JSON Value Number in Array Violation
  • JSON Object Depth Violation

Examples

v009xxxxdate=2019-09-21 time=12:54:05 log_id=20000043 msg_id=000034398160 device_id=FV3K1E3216000005 vd="root" timezone="(GMT+8:00)Beijing,ChongQing,HongKong,Urumgi" timezone_dayst="GMTa-8" type=attack pri=alert main_type="JSON Validation Security" sub_type="JSON Data Size Violation" trigger_policy="" severity_level=Low proto=tcp service=http backend_service=unknown action=Alert policy="FWB_Policy_Default_AutoTest_ttp" src=10.114.0.102 src_port=50997 dst=10.114.0.1 dst_port=80 http_method=post http_url="/autotest/server_protection/1.html" http_host="fortinet.fortiweb.com" http_agent="python-for-fortiweb" http_session_id=none msg="[rule_name = FWB_json_protection_rule] : JSON Data Size Exceeded:(The json data size 1048 Bytes exceeded the maximum allowed - 1024 Bytes)" signature_subclass="N/A" signature_id="N/A" signature_cve_id="N/A" srccountry="Reserved" content_switch_name="none" server_pool_name="FWB_server_pool" false_positive_mitigation="none" user_name="Unknown" monitor_status="Disabled" http_refer="none" http_version="1.x" dev_id="none" es=0 threat_weight=10 history_threat_weight=0 threat_level=Medium ftp_mode="N/A" ftp_cmd="N/A" cipher_suite="none" ml_log_hmm_probability=0.000000 ml_log_sample_prob_mean=0.000000 ml_log_sample_arglen_mean=0.000000 ml_log_arglen=0 ml_svm_log_main_types=0 ml_svm_log_match_types="none" ml_svm_accuracy="none" ml_domain_index=0 ml_url_dbid=0 ml_arg_dbid=0 ml_allow_method="none" owasp_top10="N/A" bot_info="none"

20000043

Meaning

JSON validation security violation.

Field name Description

log_id

20000043

See Log ID numbers.

main_type

JSON Validation Security

subtype

  • JSON Schema Validation Violation
  • JSON Format Invalid Violation
  • JSON Data Size Violation
  • JSON Key Size Violation
  • JSON Key Number Violation
  • JSON Value Size Violation
  • JSON Value Number Violation
  • JSON Value Number in Array Violation
  • JSON Object Depth Violation

Examples

v009xxxxdate=2019-09-21 time=12:54:05 log_id=20000043 msg_id=000034398160 device_id=FV3K1E3216000005 vd="root" timezone="(GMT+8:00)Beijing,ChongQing,HongKong,Urumgi" timezone_dayst="GMTa-8" type=attack pri=alert main_type="JSON Validation Security" sub_type="JSON Data Size Violation" trigger_policy="" severity_level=Low proto=tcp service=http backend_service=unknown action=Alert policy="FWB_Policy_Default_AutoTest_ttp" src=10.114.0.102 src_port=50997 dst=10.114.0.1 dst_port=80 http_method=post http_url="/autotest/server_protection/1.html" http_host="fortinet.fortiweb.com" http_agent="python-for-fortiweb" http_session_id=none msg="[rule_name = FWB_json_protection_rule] : JSON Data Size Exceeded:(The json data size 1048 Bytes exceeded the maximum allowed - 1024 Bytes)" signature_subclass="N/A" signature_id="N/A" signature_cve_id="N/A" srccountry="Reserved" content_switch_name="none" server_pool_name="FWB_server_pool" false_positive_mitigation="none" user_name="Unknown" monitor_status="Disabled" http_refer="none" http_version="1.x" dev_id="none" es=0 threat_weight=10 history_threat_weight=0 threat_level=Medium ftp_mode="N/A" ftp_cmd="N/A" cipher_suite="none" ml_log_hmm_probability=0.000000 ml_log_sample_prob_mean=0.000000 ml_log_sample_arglen_mean=0.000000 ml_log_arglen=0 ml_svm_log_main_types=0 ml_svm_log_match_types="none" ml_svm_accuracy="none" ml_domain_index=0 ml_url_dbid=0 ml_arg_dbid=0 ml_allow_method="none" owasp_top10="N/A" bot_info="none"