Skip to content

Problem Code Reference

The following table catalogs all scan problem codes as of October 2024. Each problem code represents a specific failure scenario that may be encountered during scan execution.

Private Location Issues

Problem Code Description Common Causes
Proxy unreachable or target host down API endpoint cannot be reached through configured proxy or directly Private location offline; Network connectivity issues; Target service unavailable; Incorrect proxy configuration
No available locations No locations with valid proxy configuration found All private locations offline; Proxy configuration invalid; Direct connections disabled without alternative
No locations configured No public or private locations configured for validation Missing location assignment; Location configuration not saved
Private location unreachable Configured private location cannot be contacted Private location service down; Network partition; Invalid location configuration
No reachable locations found None of the configured locations can reach the target All locations offline; Target service unreachable from all locations; Network restrictions blocking access

Authentication Issues

Problem Code Description Common Causes
Authentication failure Authentication process encountered errors Invalid credentials; Authentication endpoint unavailable; Token generation failure; Session creation failed
Authentication configuration error Authentication preset or credential format invalid Malformed authentication configuration; Invalid credential syntax; Incompatible authentication method
Failed to run scanner - Authentication Error Scanner cannot proceed due to authentication issues Feature flag not enabled; Multiple main users configured (frontend); No main user selected (frontend); Context creation failed after retries
Authentication failed User-specific authentication failed Invalid username or password; Expired credentials; User account locked; MFA requirement not satisfied
Authentication processing failed Error occurred while processing authentication configuration Configuration parsing error; Incompatible authentication method; Missing required parameters
Unable to create authenticated context Authenticated browser context cannot be established Session cookie issues; Authentication state not preserved; Browser automation failure

Configuration Recommendations

Problem Code Description Recommended Actions
Server-side rate limit detected Target API rate limiting detected during scan Whitelist Escape IP addresses; Reduce scan rate limit configuration; Coordinate scan timing with API team
Scope Manager - Invalid regex pattern URL pattern in scope configuration invalid Validate regex syntax; Test pattern against expected URLs; Review scope configuration documentation
All routes start with same prefix as base URL Schema routes redundantly include base URL prefix Update schema to use relative paths; Verify base URL configuration; Contact API provider for corrected schema
High rate of 401/403 responses detected Significant percentage of requests return authorization errors Configure user with broader permissions; Verify authentication scope; Review API access control configuration
High rate of 5xx server errors detected Target API returning frequent server errors Investigate API stability; Review API logs for errors; Consider postponing scan until API stabilized
Invalid rate-limit configuration Configured requests per second value invalid Update rate limit to valid value; Review rate limit configuration documentation

Schema Validation Issues

Problem Code Description Common Causes
Invalid GraphQL schema GraphQL schema cannot be parsed or validated Syntax errors in schema definition; Unsupported GraphQL features; Schema structure violations
Invalid OpenAPI schema OpenAPI specification cannot be parsed Invalid JSON/YAML syntax; Missing required fields; Schema specification violations; Unsupported OpenAPI version

Unreachable Asset Issues

Problem Code Description Common Causes
Asset validation failed Asset cannot be reached from any configured location Incorrect URL; Service unavailable; Network restrictions; DNS resolution failure
No URL provided Scan configuration missing target URL Incomplete scan configuration; URL field left empty
Schema not fetchable API schema document cannot be retrieved Schema URL incorrect; Schema endpoint requires authentication; Schema file not accessible
Service not reachable Target service URL cannot be accessed Service offline; Hostname resolution failure; Port closed or filtered; SSL/TLS certificate issues

Timeout Issues

Problem Code Description Recommended Actions
Scan duration limit reached Scan exceeded maximum execution time Split large API specs into smaller profiles; Increase parallel worker count; Remove redundant or unused endpoints; Review and optimize scan configuration

Security Controls

Problem Code Description Recommended Actions
Captcha detected during authentication CAPTCHA challenge encountered during login Contact support for CAPTCHA bypass options; Configure private location with CAPTCHA solving; Implement authentication via API tokens
Cloudflare block detected during authentication Cloudflare WAF blocking authentication attempts Whitelist Escape IP addresses in Cloudflare; Configure private location behind WAF; Adjust Cloudflare security settings
Blocked by Cloudflare Cloudflare WAF blocking scan traffic Add Escape IPs to Cloudflare allowlist; Configure private location in same network as target; Reduce scan aggressiveness; Review Cloudflare security rules