BHuth645156 (Community Member) asked a question.
How do you setup a Veracode scan using http to auth, but after auth it transitions to https?
I'm trying to use Veracode DAST to scan a known vulnerable application publicly available on the web. The login page is http and following authentication, it redirects to the content over an https connection. I am using a login script that first goes to the http login page, but when I execute the scan, Veracode automatically jumps to https to authenticate and fails, as the login is not available over https. I have tried seemingly everything to get Veracode to use the http for login, but nothing seems to work. It seems to keep defaulting to https for auth. Auth over insecure connection is one of the vulns of the site. Any ideas?
.png){kind=logo}
Hi,
I would recommend you contact our technical support team. Here's how you can log a case:1. Navigate to the upper right corner of any page in the Community, and click on your user avatar.
2. Select Contact Support from the drop-down menu.Open a case with Support, and provide the steps you are taking to better help assist the engineer.
Regards,
Pranita
Veracode Inc.