-
Type:
Bug
-
Status:
Closed
-
Priority:
Medium
-
Resolution:
Done
-
Affects Version/s:
None
-
Fix Version/s:
None
-
Component/s:
None
-
-
-
Module:
BenAdmin
- Security
-
-
Item State:
Production QA
[Secure Test] Request Details of Get URL for viewing Benefit Descriptions are having parameters as plain text and using same URL plan descriptions can be accessed across company.
Start Tamper Data plugin for viewing Request Details.
1. Login as Admin to Company 2.
2. Login as Employee to Company 1
3. Traverse Employee Self Serve mode to Enroll now plans like Medical,Dental,Vision etc.
4. Click on Benefit Description
5. Go to Tamper Data and check for the Request Details. Refer Screen Shots for details.
6. Copy the URL and paste it in the Admin user's session of company 2
7. Using same URL plan descriptions can be accessed across company.
Refer screenshots for details
{"report":{"apdex":0.5,"isInitial":true,"journeyId":"98bb0fb7-f702-4b35-abfd-3baf9561e880","key":"jira.project.issue.view-issue","navigationType":0,"readyForUser":1235.699999988079,"redirectCount":0,"resourceLoadedEnd":1414.8999999761581,"resourceLoadedStart":345.2999999821186,"resourceTiming":[{"duration":239.2000000178814,"initiatorType":"link","name":"https://jira.workterra.net/s/3003653444a1e1a85555cab7dcfb3a21-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/css/_super/batch.css","startTime":345.2999999821186,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":345.2999999821186,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":584.5,"responseStart":0,"secureConnectionStart":0},{"duration":239.39999997615814,"initiatorType":"link","name":"https://jira.workterra.net/s/dd6a0911920485696ac20493290df627-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/css/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&richediton=true","startTime":345.5,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":345.5,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":584.8999999761581,"responseStart":0,"secureConnectionStart":0},{"duration":239.40000000596046,"initiatorType":"link","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.css","startTime":345.59999999403954,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":345.59999999403954,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":585,"responseStart":0,"secureConnectionStart":0},{"duration":238,"initiatorType":"link","name":"https://jira.workterra.net/s/bd548f27bbf8f278bd83b60dd3284ed8-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static-adgs/jira.webresources:global-static-adgs.css","startTime":347.09999999403954,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":347.09999999403954,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":585.0999999940395,"responseStart":0,"secureConnectionStart":0},{"duration":240.7000000178814,"initiatorType":"link","name":"https://jira.workterra.net/s/70725731a158a7140f19ddbd4201ba27-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static/jira.webresources:global-static.css","startTime":347.39999997615814,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":347.39999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":588.0999999940395,"responseStart":0,"secureConnectionStart":0},{"duration":301.5,"initiatorType":"script","name":"https://jira.workterra.net/s/f2623af22c15df767ec6ff268ae0b8bd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/js/_super/batch.js?locale=en-US","startTime":347.5,"connectEnd":347.5,"connectStart":347.5,"domainLookupEnd":347.5,"domainLookupStart":347.5,"fetchStart":347.5,"redirectEnd":0,"redirectStart":0,"requestStart":347.5,"responseEnd":649,"responseStart":649,"secureConnectionStart":347.5},{"duration":412.59999999403954,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/4.1.5/_/download/resources/com.atlassian.plugins.atlassian-chaperone:hotspot-tour/hotspot-tour.js?batch=false&locale=en-US","startTime":347.69999998807907,"connectEnd":347.69999998807907,"connectStart":347.69999998807907,"domainLookupEnd":347.69999998807907,"domainLookupStart":347.69999998807907,"fetchStart":347.69999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":347.69999998807907,"responseEnd":760.2999999821186,"responseStart":760.2999999821186,"secureConnectionStart":347.69999998807907},{"duration":409.59999999403954,"initiatorType":"script","name":"https://jira.workterra.net/s/6ce676f2a5bcc9651cef6e7956f05def-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/js/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":347.69999998807907,"connectEnd":347.69999998807907,"connectStart":347.69999998807907,"domainLookupEnd":347.69999998807907,"domainLookupStart":347.69999998807907,"fetchStart":347.69999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":347.69999998807907,"responseEnd":757.2999999821186,"responseStart":757.2999999821186,"secureConnectionStart":347.69999998807907},{"duration":412.90000000596046,"initiatorType":"script","name":"https://jira.workterra.net/s/6aa3fcf1fac5fd551eee0b69077524e6-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/aae1242f5fc81cc6a5bb8bc963ccda29/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en-US","startTime":347.89999997615814,"connectEnd":347.89999997615814,"connectStart":347.89999997615814,"domainLookupEnd":347.89999997615814,"domainLookupStart":347.89999997615814,"fetchStart":347.89999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":347.89999997615814,"responseEnd":760.7999999821186,"responseStart":760.7999999821186,"secureConnectionStart":347.89999997615814},{"duration":413.19999998807907,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":348.09999999403954,"connectEnd":348.09999999403954,"connectStart":348.09999999403954,"domainLookupEnd":348.09999999403954,"domainLookupStart":348.09999999403954,"fetchStart":348.09999999403954,"redirectEnd":0,"redirectStart":0,"requestStart":348.09999999403954,"responseEnd":761.2999999821186,"responseStart":761.1999999880791,"secureConnectionStart":348.09999999403954},{"duration":413.40000000596046,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":348.39999997615814,"connectEnd":348.39999997615814,"connectStart":348.39999997615814,"domainLookupEnd":348.39999997615814,"domainLookupStart":348.39999997615814,"fetchStart":348.39999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":348.39999997615814,"responseEnd":761.7999999821186,"responseStart":761.7999999821186,"secureConnectionStart":348.39999997615814},{"duration":413.69999998807907,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.js?locale=en-US","startTime":348.5,"connectEnd":348.5,"connectStart":348.5,"domainLookupEnd":348.5,"domainLookupStart":348.5,"fetchStart":348.5,"redirectEnd":0,"redirectStart":0,"requestStart":348.5,"responseEnd":762.1999999880791,"responseStart":762.1999999880791,"secureConnectionStart":348.5},{"duration":414,"initiatorType":"link","name":"https://jira.workterra.net/s/05c862146699bb029ceb0a489075e63b-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/bcd66e9a133a1b9f5fd14b56841e1c5b/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":348.89999997615814,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":348.89999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":762.8999999761581,"responseStart":0,"secureConnectionStart":0},{"duration":413.89999997615814,"initiatorType":"script","name":"https://jira.workterra.net/rest/api/1.0/shortcuts/805012/e80c7a6aee0fa86c2b1a716575a614aa/shortcuts.js?context=issuenavigation&context=issueaction","startTime":349,"connectEnd":349,"connectStart":349,"domainLookupEnd":349,"domainLookupStart":349,"fetchStart":349,"redirectEnd":0,"redirectStart":0,"requestStart":349,"responseEnd":762.8999999761581,"responseStart":762.8999999761581,"secureConnectionStart":349},{"duration":414.40000000596046,"initiatorType":"link","name":"https://jira.workterra.net/s/9095228fa10daa2d3e3d7d5760c95e91-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.css?jira.create.linked.issue=true&richediton=true","startTime":349.19999998807907,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":349.19999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":763.5999999940395,"responseStart":0,"secureConnectionStart":0},{"duration":414.09999999403954,"initiatorType":"script","name":"https://jira.workterra.net/s/c19a1b46e985d7fb85efaf27c8febfdd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.js?jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":349.59999999403954,"connectEnd":349.59999999403954,"connectStart":349.59999999403954,"domainLookupEnd":349.59999999403954,"domainLookupStart":349.59999999403954,"fetchStart":349.59999999403954,"redirectEnd":0,"redirectStart":0,"requestStart":349.59999999403954,"responseEnd":763.6999999880791,"responseStart":763.6999999880791,"secureConnectionStart":349.59999999403954}],"threshold":1000,"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":124,"responseStart":339,"responseEnd":366,"domLoading":344,"domInteractive":1451,"domContentLoadedEventStart":1452,"domContentLoadedEventEnd":1514,"domComplete":1839,"loadEventStart":1839,"loadEventEnd":1842,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[],"measures":[],"correlationId":"78828e235dd605","effectiveType":"4g","downlink":9.3,"rtt":0,"serverDuration":141,"dbReadsTimeInMs":15,"dbConnsTimeInMs":17,"applicationHash":"156decd7d2b4272533aa6cefc8294af635e1da97","experiments":[]}}
HI Vijayendra Shinde
Issue verified on Stage after patch deployment. I tried by removing the value of parameter "encryptedCompanyID" and hit Enter key. No Plan details displayed.
User is asked to click on "Return to home page" button.
Thanks
CC: SamirVijay SiddhaRakesh Roy