Invalid Viewstate entries in error log

[jdarby]

For PCI DSS compliance, we use Elavon Trustwave to scan our site monthly. When they scan our AbleCommerce install, I end up with ~1200 similar entries in the error log with the following information:

Severity: Error
Message (Not always on the same page): An error has occured at http://www.guest.hyattathomeservices.co ... tegoryId=6
Debug Data:

Code: Select all

The state information is invalid for this page and might be corrupted.; Invalid viewstate. Client IP: 38.98.136.236 Port: 59957 User-Agent: Mozilla/5.0 (compatible; TrustKeeper Scanner; +https://www.trustkeeper.net) ViewState: /wEPDwUKMTMwOTE0NDgwOA9kFgJmD2QWAgIDD2QWAgIFD2QWAgULU2hvd1Byb2R1Y3QPZBYEAgUPZBYCAgEPPCsACQIADxYEHg1OZXZlckV4cGFuZGVkZB4LXyFEYXRhQm91bmRnZAgUKwAEBQswOjAsMDoxLDA6MhQrAAIWBh4EVGV4dAUWSHlhdHQgR3JhbmQgQmVkJnRyYWRlOx4FVmFsdWUFATEeC05hdmlnYXRlVXJsBR5 L0h5YXR0LUdyYW5kLUJlZHRyYWRlLUMxLmFzcHhkFCsAAhYKHwIFDkdyYW5kIEJlZCBCYXNlHwMFATYfBAUYfi9HcmFuZC1CZWQtQmFzZS1DNi5hc3B4HghTZWxlY3RlZGceCEV4cGFuZGVkZ2QUKwACFgYfAgUKQmVkIEZyYW1lcx8DBQIxMh8EBRV L0JlZC1GcmFtZXMtQzEyLmFzcHhkZAIRD2QWCAIBDw8WBB4GVGFyZ2V0BQVfc2VsZh8EBQt Ly1XMTAuYXNweGQWAmYPDxYCHghJbWFnZVVybAUbfi9Bc3NldHMvQmFubmVySW1hZ2VzLzIucG5nZGQCAw8PFgQfBwUFX3NlbGYfBAULfi8tVzEwLmFzcHhkFgJmDw8WAh8IBR9 L0Fzc2V0cy9CYW5uZXJJbWFnZXMvdHJ1Y2suZ2lmZGQCBQ8PFgQfBwUFX3NlbGYfBAULfi8tUDIxLmFzcHhkFgJmDw8WAh8IBRt L0Fzc2V0cy9CYW5uZXJJbWFnZXMvMS5wbmdkZAIHDw8WBB8HBQVfc2VsZh8EBQt Ly1QMjEuYXNweGQWAmYPDxYCHwgFIX4vQXNzZXRzL0Jhbm5lckltYWdlcy9iYmltYWdlLnBu...

Is this a known issue? I followed the instructions at http://wiki.ablecommerce.com/index.php/ ... achine_Key to use a pre-defined machine key but that did not solve the problem.

[jdarby]

would this be also related to http://bugs.ablecommerce.com/show_bug.cgi?id=7880 and also fixed in 7.0.3?