[NF-2334] All Company- Employee Login - URL parameters - Security - URL parameters in all the SSM pages,reports are displayed in plain text. - Workterra Jira

Details

Type: Bug
Status: Closed
Priority: High
Resolution: Bug Fixed
Affects Version/s: None
Fix Version/s: None
Component/s: UI Refresh
Labels:
None

Environment:

Pre Production
Bug Type:
Functional
Bug Severity:
Medium
Level:

Employee
Module:
BenAdmin - Security
Reported by:
Harbinger
Company:
All Clients/Multiple Clients
Item State:
Stage QA - Production Deployment on Hold
Issue Importance:
Q2

Description

All Company- Employee Login - URL parameters - Security - URL parameter values in all the SSM pages,reports are displayed in plain text.

As observed all the URL parameter values are displayed in plain english text and can be vulnerable for security breach.

This can be generic issue and may exist for Admin,Partners,SA user roles too.

CC : Vijayendra Shinde Sachin Hingole Rakesh Roy Hrishikesh Deshpande Rohan J Khandave Samir

Attachments

Options
- Sort By Name
- Sort By Date
- Ascending
- Descending
- Thumbnails
- List
- Download All

Attachments

CCSF_URLData_notEncrypted.jpg
222 kB
01/Jun/17 12:18 PM
EmpBen.jpg
99 kB
27/Feb/18 12:36 PM
ParameterURL.jpg
180 kB
12/Jan/18 12:15 PM

Issue Links

relates to

NF-2714 Vulnerability Assessment and Penetration Testing for Workterra on Azure US environment.

To Do

Activity

Ascending order - Click to sort in descending order

Prasad Pise (Inactive) created issue - 01/Jun/17 12:20 PM

Vijayendra Shinde (Inactive) made changes - 05/Jun/17 05:02 AM

Field	Original Value	New Value
Status	Open [ 1 ]	In Development [ 10007 ]

Vijayendra Shinde (Inactive) made changes - 05/Jun/17 05:04 AM

Assignee	Vijayendra Shinde [ ID10506 ]	Prasad Pise [ prasadp ]
Resolution		System Behaviour [ 10100 ]
Status	In Development [ 10007 ]	Rejected [ 10004 ]

Prasad Pise (Inactive) made changes - 18/Jul/17 01:13 PM

Link

This issue relates to NF-2714 [ NF-2714 ]

Prasad Pise (Inactive) made changes - 14/Nov/17 05:43 AM

Status

Rejected [ 10004 ]

Closed [ 6 ]

Prasad Pise (Inactive) made changes - 12/Jan/18 12:07 PM

Module

Parent values: BenAdmin(10100)

Parent values: BenAdmin(10100)Level 1 values: Security(10112)

Prasad Pise (Inactive) made changes - 12/Jan/18 12:14 PM

Status

Closed [ 6 ]

Reopen in Production [ 10027 ]

Prasad Pise (Inactive) made changes - 12/Jan/18 12:14 PM

Assignee

Prasad Pise [ prasadp ]

Vijayendra Shinde [ ID10506 ]

Prasad Pise (Inactive) made changes - 12/Jan/18 12:15 PM

Attachment

ParameterURL.jpg [ 71722 ]

Prasad Pise (Inactive) made changes - 12/Jan/18 12:42 PM

Bug Severity		Medium [ 16702 ]
Company		All Clients/Multiple Clients [ 18434 ]
Environment		Pre Production [ 18470 ]
Priority	Highest [ 1 ]	High [ 2 ]

Pratap Patil (Inactive) made changes - 19/Feb/18 08:53 AM

Assignee

Vijayendra Shinde [ ID10506 ]

Pratap Patil [ pratap.patil ]

Pratap Patil (Inactive) made changes - 19/Feb/18 08:53 AM

Status

Reopen in Production [ 10027 ]

In Development [ 10007 ]

Pratap Patil (Inactive) made changes - 19/Feb/18 09:02 AM

Item State

Parent values: Development(10200)Level 1 values: In Progress(10206)

Pratap Patil (Inactive) made changes - 20/Feb/18 05:27 AM

Code Reviewed By

Vijayendra Shinde [ 11901 ]

Pratap Patil (Inactive) made changes - 20/Feb/18 06:47 AM

Item State

Parent values: Development(10200)Level 1 values: In Progress(10206)

Parent values: Development(10200)Level 1 values: Ready for Local Testing(10209)

Pratap Patil (Inactive) made changes - 20/Feb/18 07:06 AM

Assignee

Pratap Patil [ pratap.patil ]

Prasad Pise [ prasadp ]

Khandu Kshirsagar (Inactive) made changes - 20/Feb/18 07:28 AM

Item State

Parent values: Development(10200)Level 1 values: Ready for Local Testing(10209)

Parent values: LB QA(10201)Level 1 values: LB Deployed(11600)

Pratap Patil (Inactive) made changes - 21/Feb/18 12:38 PM

Remaining Estimate		0h [ 0 ]
Time Spent		5h [ 18000 ]
Worklog Id		105454 [ 105454 ]

Prasad Pise (Inactive) made changes - 22/Feb/18 08:54 AM

Status

In Development [ 10007 ]

Local Testing [ 10200 ]

Prasad Pise (Inactive) made changes - 22/Feb/18 08:54 AM

Item State

Parent values: LB QA(10201)Level 1 values: LB Deployed(11600)

Parent values: LB QA(10201)Level 1 values: In Testing(10210)

Prasad Pise (Inactive) made changes - 22/Feb/18 01:31 PM

Time Spent	5h [ 18000 ]	6h [ 21600 ]
Worklog Id		105996 [ 105996 ]

Khandu Kshirsagar (Inactive) made changes - 23/Feb/18 06:27 AM

Item State

Parent values: LB QA(10201)Level 1 values: In Testing(10210)

Parent values: Stage QA(10202)Level 1 values: Stage Deployed(11602)

Sachin Hingole (Inactive) made changes - 23/Feb/18 06:32 AM

Status

Local Testing [ 10200 ]

Stage Testing [ 10201 ]

Sachin Hingole (Inactive) made changes - 23/Feb/18 06:58 AM

Item State

Parent values: Stage QA(10202)Level 1 values: Stage Deployed(11602)

Parent values: Stage QA(10202)Level 1 values: In Testing(10214)

Prasad Pise (Inactive) made changes - 23/Feb/18 12:55 PM

Time Spent	6h [ 21600 ]	6.5h [ 23400 ]
Worklog Id		106091 [ 106091 ]

Komal Barde (Inactive) made changes - 26/Feb/18 05:23 AM

Time Spent	6.5h [ 23400 ]	13.5h [ 48600 ]
Worklog Id		106153 [ 106153 ]

Khandu Kshirsagar (Inactive) made changes - 26/Feb/18 12:08 PM

Item State

Parent values: Stage QA(10202)Level 1 values: In Testing(10214)

Parent values: LB QA(10201)Level 1 values: LB Deployed(11600)

Komal Barde (Inactive) made changes - 26/Feb/18 12:10 PM

Time Spent	13.5h [ 48600 ]	15.5h [ 55800 ]
Worklog Id		106279 [ 106279 ]

Prasad Pise (Inactive) made changes - 26/Feb/18 02:16 PM

Time Spent	15.5h [ 55800 ]	17.5h [ 63000 ]
Worklog Id		106333 [ 106333 ]

Prasad Pise (Inactive) made changes - 27/Feb/18 05:34 AM

Item State

Parent values: LB QA(10201)Level 1 values: LB Deployed(11600)

Parent values: LB QA(10201)Level 1 values: In Testing(10210)

Khandu Kshirsagar (Inactive) made changes - 27/Feb/18 07:23 AM

Item State

Parent values: LB QA(10201)Level 1 values: In Testing(10210)

Parent values: Stage QA(10202)Level 1 values: Stage Deployed(11602)

Prasad Pise (Inactive) made changes - 27/Feb/18 12:37 PM

Attachment

EmpBen.jpg [ 73844 ]

Prasad Pise (Inactive) made changes - 27/Feb/18 01:53 PM

Time Spent	17.5h [ 63000 ]	19.5h [ 70200 ]
Worklog Id		106484 [ 106484 ]

Prasad Pise (Inactive) made changes - 27/Feb/18 01:53 PM

Assignee

Prasad Pise [ prasadp ]

Komal Barde [ komal.barde ]

Sachin Hingole (Inactive) made changes - 28/Feb/18 05:38 AM

Resolution	System Behaviour [ 10100 ]	Unresolved [ 10200 ]
Status	Stage Testing [ 10201 ]	Reopen in Stage [ 10023 ]

Sachin Hingole (Inactive) made changes - 28/Feb/18 05:38 AM

Item State

Parent values: Stage QA(10202)Level 1 values: Stage Deployed(11602)

Parent values: Stage QA(10202)Level 1 values: Re-open(10216)

Khandu Kshirsagar (Inactive) made changes - 28/Feb/18 08:29 AM

Item State

Parent values: Stage QA(10202)Level 1 values: Re-open(10216)

Parent values: LB QA(10201)Level 1 values: LB Deployed(11600)

Pratap Patil (Inactive) made changes - 28/Feb/18 09:11 AM

Assignee

Komal Barde [ komal.barde ]

Prasad Pise [ prasadp ]

Prasad Pise (Inactive) made changes - 28/Feb/18 09:35 AM

Item State

Parent values: LB QA(10201)Level 1 values: LB Deployed(11600)

Parent values: LB QA(10201)Level 1 values: In Testing(10210)

Prasad Pise (Inactive) made changes - 28/Feb/18 09:35 AM

Item State

Parent values: LB QA(10201)Level 1 values: In Testing(10210)

Parent values: LB QA(10201)Level 1 values: Ready for Stage(10213)

Khandu Kshirsagar (Inactive) made changes - 28/Feb/18 10:26 AM

Item State

Parent values: LB QA(10201)Level 1 values: Ready for Stage(10213)

Parent values: Stage QA(10202)Level 1 values: Stage Deployed(11602)

Prasad Pise (Inactive) made changes - 28/Feb/18 10:57 AM

Status

Reopen in Stage [ 10023 ]

In Development [ 10007 ]

Prasad Pise (Inactive) made changes - 28/Feb/18 10:57 AM

Status

In Development [ 10007 ]

Local Testing [ 10200 ]

Prasad Pise (Inactive) made changes - 28/Feb/18 10:57 AM

Status

Local Testing [ 10200 ]

Stage Testing [ 10201 ]

Prasad Pise (Inactive) made changes - 28/Feb/18 10:57 AM

Item State

Parent values: Stage QA(10202)Level 1 values: Stage Deployed(11602)

Parent values: Stage QA(10202)Level 1 values: In Testing(10214)

Prasad Pise (Inactive) made changes - 28/Feb/18 12:12 PM

Item State

Parent values: Stage QA(10202)Level 1 values: In Testing(10214)

Parent values: Stage QA(10202)Level 1 values: Production Deployment on Hold(10224)

Prasad Pise (Inactive) made changes - 28/Feb/18 12:13 PM

Time Spent	19.5h [ 70200 ]	22.5h [ 81000 ]
Worklog Id		106674 [ 106674 ]

Komal Barde (Inactive) made changes - 01/Mar/18 04:57 AM

Time Spent	22.5h [ 81000 ]	24.5h [ 88200 ]
Worklog Id		106781 [ 106781 ]

Prasad Pise (Inactive) made changes - 15/Mar/18 06:38 AM

Status

Stage Testing [ 10201 ]

Production Testing [ 10202 ]

Prasad Pise (Inactive) made changes - 21/Mar/18 12:27 PM

Resolution	Unresolved [ 10200 ]	Bug Fixed [ 10402 ]
Status	Production Testing [ 10202 ]	Production Complete [ 10028 ]

Prasad Pise (Inactive) made changes - 21/Mar/18 12:28 PM

Time Spent	24.5h [ 88200 ]	26.5h [ 95400 ]
Worklog Id		109208 [ 109208 ]

Prasad Pise (Inactive) made changes - 21/Mar/18 12:28 PM

Status

Production Complete [ 10028 ]

Closed [ 6 ]

Vijayendra Shinde (Inactive) made changes - 15/Dec/20 02:53 AM

Link

This issue relates to DEV-13718 [ DEV-13718 ]

People

Assignee:: Prasad Pise (Inactive)

Reporter:: Prasad Pise (Inactive)

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Dates

Created:: 01/Jun/17 12:20 PM

Updated:: 15/Dec/20 02:53 AM

Resolved:: 21/Mar/18 12:27 PM

Time Tracking

Estimated:

Not Specified

Remaining:

Logged:

26.5h