-
Type:
Bug
-
Status:
Open
-
Priority:
High
-
Resolution:
Unresolved
-
Affects Version/s:
None
-
Fix Version/s:
None
-
Component/s:
None
-
-
-
-
Module:
BenAdmin
- Security
-
[Security Test]
{Critical Information Disclosure}
Table Name and Column Names get displayed in proxy tools.
Test Environment : Production: VM-208..
Tool used:
Tamper Data - Mozilla Browser plugin
1. Login as Admin
2. Go to Add Employee
3. Enter required fields in Add New employee page
4. Go to Tamper Data
5. Click on Start Tamper
6. Go to Add Employee Page and click on Save button.
7. Check for the Tamper Data POST form parameters.
For more details check attached Screenshot.
This issue is observed throughout the application.
There are no comments yet on this issue.
{"report":{"apdex":1,"isInitial":true,"journeyId":"22f3dfc2-5356-45b7-a3e6-418b68140b3f","key":"jira.project.issue.view-issue","navigationType":0,"readyForUser":977.1999999880791,"redirectCount":0,"resourceLoadedEnd":563.0999999940395,"resourceLoadedStart":314.89999997615814,"resourceTiming":[{"duration":17.400000005960464,"initiatorType":"link","name":"https://jira.workterra.net/s/3003653444a1e1a85555cab7dcfb3a21-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/css/_super/batch.css","startTime":314.89999997615814,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":314.89999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":332.2999999821186,"responseStart":0,"secureConnectionStart":0},{"duration":17,"initiatorType":"link","name":"https://jira.workterra.net/s/dd6a0911920485696ac20493290df627-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/css/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&richediton=true","startTime":315.2999999821186,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":315.2999999821186,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":332.2999999821186,"responseStart":0,"secureConnectionStart":0},{"duration":17.200000017881393,"initiatorType":"link","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.css","startTime":315.39999997615814,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":315.39999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":332.59999999403954,"responseStart":0,"secureConnectionStart":0},{"duration":18.099999994039536,"initiatorType":"link","name":"https://jira.workterra.net/s/bd548f27bbf8f278bd83b60dd3284ed8-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static-adgs/jira.webresources:global-static-adgs.css","startTime":315.5,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":315.5,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":333.59999999403954,"responseStart":0,"secureConnectionStart":0},{"duration":18,"initiatorType":"link","name":"https://jira.workterra.net/s/70725731a158a7140f19ddbd4201ba27-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static/jira.webresources:global-static.css","startTime":315.59999999403954,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":315.59999999403954,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":333.59999999403954,"responseStart":0,"secureConnectionStart":0},{"duration":176.59999999403954,"initiatorType":"script","name":"https://jira.workterra.net/s/f2623af22c15df767ec6ff268ae0b8bd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/js/_super/batch.js?locale=en-US","startTime":315.7999999821186,"connectEnd":315.7999999821186,"connectStart":315.7999999821186,"domainLookupEnd":315.7999999821186,"domainLookupStart":315.7999999821186,"fetchStart":315.7999999821186,"redirectEnd":0,"redirectStart":0,"requestStart":335.2999999821186,"responseEnd":492.39999997615814,"responseStart":397,"secureConnectionStart":315.7999999821186},{"duration":97.7999999821186,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/4.1.5/_/download/resources/com.atlassian.plugins.atlassian-chaperone:hotspot-tour/hotspot-tour.js?batch=false&locale=en-US","startTime":316.5,"connectEnd":316.5,"connectStart":316.5,"domainLookupEnd":316.5,"domainLookupStart":316.5,"fetchStart":316.5,"redirectEnd":0,"redirectStart":0,"requestStart":339.5,"responseEnd":414.2999999821186,"responseStart":413.69999998807907,"secureConnectionStart":316.5},{"duration":230,"initiatorType":"script","name":"https://jira.workterra.net/s/6ce676f2a5bcc9651cef6e7956f05def-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/js/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":316.5,"connectEnd":316.5,"connectStart":316.5,"domainLookupEnd":316.5,"domainLookupStart":316.5,"fetchStart":316.5,"redirectEnd":0,"redirectStart":0,"requestStart":338.69999998807907,"responseEnd":546.5,"responseStart":409.19999998807907,"secureConnectionStart":316.5},{"duration":98.19999998807907,"initiatorType":"script","name":"https://jira.workterra.net/s/6aa3fcf1fac5fd551eee0b69077524e6-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/aae1242f5fc81cc6a5bb8bc963ccda29/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en-US","startTime":316.69999998807907,"connectEnd":316.69999998807907,"connectStart":316.69999998807907,"domainLookupEnd":316.69999998807907,"domainLookupStart":316.69999998807907,"fetchStart":316.69999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":340,"responseEnd":414.89999997615814,"responseStart":414.39999997615814,"secureConnectionStart":316.69999998807907},{"duration":99.90000000596046,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":316.69999998807907,"connectEnd":316.69999998807907,"connectStart":316.69999998807907,"domainLookupEnd":316.69999998807907,"domainLookupStart":316.69999998807907,"fetchStart":316.69999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":345,"responseEnd":416.59999999403954,"responseStart":414.89999997615814,"secureConnectionStart":316.69999998807907},{"duration":100.40000000596046,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":316.69999998807907,"connectEnd":316.69999998807907,"connectStart":316.69999998807907,"domainLookupEnd":316.69999998807907,"domainLookupStart":316.69999998807907,"fetchStart":316.69999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":349.69999998807907,"responseEnd":417.09999999403954,"responseStart":416.69999998807907,"secureConnectionStart":316.69999998807907},{"duration":100.80000001192093,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.js?locale=en-US","startTime":316.7999999821186,"connectEnd":316.7999999821186,"connectStart":316.7999999821186,"domainLookupEnd":316.7999999821186,"domainLookupStart":316.7999999821186,"fetchStart":316.7999999821186,"redirectEnd":0,"redirectStart":0,"requestStart":349.7999999821186,"responseEnd":417.59999999403954,"responseStart":417.19999998807907,"secureConnectionStart":316.7999999821186},{"duration":31.30000001192093,"initiatorType":"link","name":"https://jira.workterra.net/s/05c862146699bb029ceb0a489075e63b-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/bcd66e9a133a1b9f5fd14b56841e1c5b/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":316.89999997615814,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":316.89999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":348.19999998807907,"responseStart":0,"secureConnectionStart":0},{"duration":101.19999998807907,"initiatorType":"script","name":"https://jira.workterra.net/rest/api/1.0/shortcuts/805012/81da1c7492d7ee698ae1cc31902498d9/shortcuts.js?context=issuenavigation&context=issueaction","startTime":317,"connectEnd":317,"connectStart":317,"domainLookupEnd":317,"domainLookupStart":317,"fetchStart":317,"redirectEnd":0,"redirectStart":0,"requestStart":350.2999999821186,"responseEnd":418.19999998807907,"responseStart":417.69999998807907,"secureConnectionStart":317},{"duration":31.69999998807907,"initiatorType":"link","name":"https://jira.workterra.net/s/9095228fa10daa2d3e3d7d5760c95e91-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.css?jira.create.linked.issue=true&richediton=true","startTime":317.09999999403954,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":317.09999999403954,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":348.7999999821186,"responseStart":0,"secureConnectionStart":0},{"duration":110.09999999403954,"initiatorType":"script","name":"https://jira.workterra.net/s/c19a1b46e985d7fb85efaf27c8febfdd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.js?jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":317.09999999403954,"connectEnd":317.09999999403954,"connectStart":317.09999999403954,"domainLookupEnd":317.09999999403954,"domainLookupStart":317.09999999403954,"fetchStart":317.09999999403954,"redirectEnd":0,"redirectStart":0,"requestStart":362.59999999403954,"responseEnd":427.19999998807907,"responseStart":418.19999998807907,"secureConnectionStart":317.09999999403954},{"duration":225.7999999821186,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":330,"connectEnd":330,"connectStart":330,"domainLookupEnd":330,"domainLookupStart":330,"fetchStart":330,"redirectEnd":0,"redirectStart":0,"requestStart":441.59999999403954,"responseEnd":555.7999999821186,"responseStart":555.3999999761581,"secureConnectionStart":330},{"duration":233.09999999403954,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":330,"connectEnd":330,"connectStart":330,"domainLookupEnd":330,"domainLookupStart":330,"fetchStart":330,"redirectEnd":0,"redirectStart":0,"requestStart":455,"responseEnd":563.0999999940395,"responseStart":562.3999999761581,"secureConnectionStart":330},{"duration":132.59999999403954,"initiatorType":"xmlhttprequest","name":"https://jira.workterra.net/rest/webResources/1.0/resources","startTime":702,"connectEnd":702,"connectStart":702,"domainLookupEnd":702,"domainLookupStart":702,"fetchStart":702,"redirectEnd":0,"redirectStart":0,"requestStart":809.8999999761581,"responseEnd":834.5999999940395,"responseStart":832.5,"secureConnectionStart":702}],"threshold":1000,"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":138,"responseStart":297,"responseEnd":329,"domLoading":302,"domInteractive":1032,"domContentLoadedEventStart":1032,"domContentLoadedEventEnd":1085,"domComplete":1824,"loadEventStart":1824,"loadEventEnd":1826,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[],"measures":[],"correlationId":"3e083287e461e1","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":140,"dbReadsTimeInMs":21,"dbConnsTimeInMs":25,"applicationHash":"156decd7d2b4272533aa6cefc8294af635e1da97","experiments":[]}}