-
Type:
Bug
-
Status:
Open
-
Priority:
Medium
-
Resolution:
Unresolved
-
Affects Version/s:
None
-
Fix Version/s:
None
-
Component/s:
None
-
-
-
-
-
Module:
Platform
- Security
-
-
Company:
All Clients/Multiple Clients
-
Item State:
Development
- On Hold
Scenario Traversed:
- Login with partner credentials.
- Select security testing company 'Beta testing 1'
- Navigate to Search employee and select any test employee.
- Navigate to Change employee password.
- Change the password of selected employee.
- Logout from the application.
Attached is the penetration test report of spidering above mentioned workflow from OWASP ZAP.
We have observed that the alerts under 'Low' category need to be addressed.
Satya Can you please assign this ticket to concerned developer.
Prasad Pise Samir Rakesh Roy
{"report":{"apdex":0.5,"isInitial":true,"journeyId":"f797b024-1f25-4855-8ff9-aaecf05f7ce0","key":"jira.project.issue.view-issue","navigationType":0,"readyForUser":1179.2000000001863,"redirectCount":0,"resourceLoadedEnd":1227.7999999998137,"resourceLoadedStart":186.60000000009313,"resourceTiming":[{"duration":236.60000000009313,"initiatorType":"link","name":"https://jira.workterra.net/s/3003653444a1e1a85555cab7dcfb3a21-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/css/_super/batch.css","startTime":186.60000000009313,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":186.60000000009313,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":423.20000000018626,"responseStart":0,"secureConnectionStart":0},{"duration":236.60000000009313,"initiatorType":"link","name":"https://jira.workterra.net/s/dd6a0911920485696ac20493290df627-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/css/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&richediton=true","startTime":186.89999999990687,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":186.89999999990687,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":423.5,"responseStart":0,"secureConnectionStart":0},{"duration":418.1999999997206,"initiatorType":"link","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.css","startTime":187.10000000009313,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":187.10000000009313,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":605.2999999998137,"responseStart":0,"secureConnectionStart":0},{"duration":420.09999999962747,"initiatorType":"link","name":"https://jira.workterra.net/s/bd548f27bbf8f278bd83b60dd3284ed8-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static-adgs/jira.webresources:global-static-adgs.css","startTime":187.20000000018626,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":187.20000000018626,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":607.2999999998137,"responseStart":0,"secureConnectionStart":0},{"duration":421,"initiatorType":"link","name":"https://jira.workterra.net/s/70725731a158a7140f19ddbd4201ba27-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static/jira.webresources:global-static.css","startTime":187.20000000018626,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":187.20000000018626,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":608.2000000001863,"responseStart":0,"secureConnectionStart":0},{"duration":471.90000000037253,"initiatorType":"script","name":"https://jira.workterra.net/s/f2623af22c15df767ec6ff268ae0b8bd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/js/_super/batch.js?locale=en-US","startTime":187.29999999981374,"connectEnd":187.29999999981374,"connectStart":187.29999999981374,"domainLookupEnd":187.29999999981374,"domainLookupStart":187.29999999981374,"fetchStart":187.29999999981374,"redirectEnd":0,"redirectStart":0,"requestStart":187.29999999981374,"responseEnd":659.2000000001863,"responseStart":659.2000000001863,"secureConnectionStart":187.29999999981374},{"duration":529,"initiatorType":"script","name":"https://jira.workterra.net/s/6ce676f2a5bcc9651cef6e7956f05def-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/js/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":187.5,"connectEnd":187.5,"connectStart":187.5,"domainLookupEnd":187.5,"domainLookupStart":187.5,"fetchStart":187.5,"redirectEnd":0,"redirectStart":0,"requestStart":187.5,"responseEnd":716.5,"responseStart":716.5,"secureConnectionStart":187.5},{"duration":531.8999999999069,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/4.1.5/_/download/resources/com.atlassian.plugins.atlassian-chaperone:hotspot-tour/hotspot-tour.js?batch=false&locale=en-US","startTime":187.60000000009313,"connectEnd":187.60000000009313,"connectStart":187.60000000009313,"domainLookupEnd":187.60000000009313,"domainLookupStart":187.60000000009313,"fetchStart":187.60000000009313,"redirectEnd":0,"redirectStart":0,"requestStart":187.60000000009313,"responseEnd":719.5,"responseStart":719.5,"secureConnectionStart":187.60000000009313},{"duration":533.0999999996275,"initiatorType":"script","name":"https://jira.workterra.net/s/6aa3fcf1fac5fd551eee0b69077524e6-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/aae1242f5fc81cc6a5bb8bc963ccda29/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en-US","startTime":187.70000000018626,"connectEnd":187.70000000018626,"connectStart":187.70000000018626,"domainLookupEnd":187.70000000018626,"domainLookupStart":187.70000000018626,"fetchStart":187.70000000018626,"redirectEnd":0,"redirectStart":0,"requestStart":187.70000000018626,"responseEnd":720.7999999998137,"responseStart":720.7999999998137,"secureConnectionStart":187.70000000018626},{"duration":594.8000000002794,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":187.89999999990687,"connectEnd":187.89999999990687,"connectStart":187.89999999990687,"domainLookupEnd":187.89999999990687,"domainLookupStart":187.89999999990687,"fetchStart":187.89999999990687,"redirectEnd":0,"redirectStart":0,"requestStart":187.89999999990687,"responseEnd":782.7000000001863,"responseStart":782.7000000001863,"secureConnectionStart":187.89999999990687},{"duration":597.6000000000931,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":187.89999999990687,"connectEnd":187.89999999990687,"connectStart":187.89999999990687,"domainLookupEnd":187.89999999990687,"domainLookupStart":187.89999999990687,"fetchStart":187.89999999990687,"redirectEnd":0,"redirectStart":0,"requestStart":187.89999999990687,"responseEnd":785.5,"responseStart":785.5,"secureConnectionStart":187.89999999990687},{"duration":598.8999999999069,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.js?locale=en-US","startTime":188.10000000009313,"connectEnd":188.10000000009313,"connectStart":188.10000000009313,"domainLookupEnd":188.10000000009313,"domainLookupStart":188.10000000009313,"fetchStart":188.10000000009313,"redirectEnd":0,"redirectStart":0,"requestStart":188.10000000009313,"responseEnd":787,"responseStart":787,"secureConnectionStart":188.10000000009313},{"duration":599.3999999999069,"initiatorType":"link","name":"https://jira.workterra.net/s/05c862146699bb029ceb0a489075e63b-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/bcd66e9a133a1b9f5fd14b56841e1c5b/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":188.20000000018626,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":188.20000000018626,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":787.6000000000931,"responseStart":0,"secureConnectionStart":0},{"duration":599.1000000000931,"initiatorType":"script","name":"https://jira.workterra.net/rest/api/1.0/shortcuts/805012/e80c7a6aee0fa86c2b1a716575a614aa/shortcuts.js?context=issuenavigation&context=issueaction","startTime":188.39999999990687,"connectEnd":188.39999999990687,"connectStart":188.39999999990687,"domainLookupEnd":188.39999999990687,"domainLookupStart":188.39999999990687,"fetchStart":188.39999999990687,"redirectEnd":0,"redirectStart":0,"requestStart":188.39999999990687,"responseEnd":787.5,"responseStart":787.5,"secureConnectionStart":188.39999999990687},{"duration":600.1000000000931,"initiatorType":"link","name":"https://jira.workterra.net/s/9095228fa10daa2d3e3d7d5760c95e91-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.css?jira.create.linked.issue=true&richediton=true","startTime":188.5,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":188.5,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":788.6000000000931,"responseStart":0,"secureConnectionStart":0},{"duration":600.1000000000931,"initiatorType":"script","name":"https://jira.workterra.net/s/c19a1b46e985d7fb85efaf27c8febfdd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.js?jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":188.60000000009313,"connectEnd":188.60000000009313,"connectStart":188.60000000009313,"domainLookupEnd":188.60000000009313,"domainLookupStart":188.60000000009313,"fetchStart":188.60000000009313,"redirectEnd":0,"redirectStart":0,"requestStart":188.60000000009313,"responseEnd":788.7000000001863,"responseStart":788.7000000001863,"secureConnectionStart":188.60000000009313}],"threshold":1000,"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":82,"responseStart":180,"responseEnd":181,"domLoading":184,"domInteractive":1284,"domContentLoadedEventStart":1284,"domContentLoadedEventEnd":1348,"domComplete":1623,"loadEventStart":1623,"loadEventEnd":1625,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[],"measures":[],"correlationId":"3568b617c5a87d","effectiveType":"4g","downlink":9.9,"rtt":0,"serverDuration":78,"dbReadsTimeInMs":13,"dbConnsTimeInMs":16,"applicationHash":"156decd7d2b4272533aa6cefc8294af635e1da97","experiments":[]}}
Cc: Samir Jaideep Vinchurkar