All ideas

Showing 10205

MDM CE - Server Information Disclosure

Revealing server information or system data helps an attacker learn about the technologies used by the application, which can aid him in forming a plan of attack. The information revealed could then be abused to craft more effective exploits again...

almost 6 years ago in Product Master 0 Not under consideration

1 VOTE

MDM CE - Web application crawling rules not specified

"Pages containing sensitive information may be indexed, and subsequently cached, by a spider or robot that has discovered the MacLeaseAU application. A particularly thorough and intelligent spider or robot may even be able to find confidential inf...

almost 6 years ago in Product Master 1 Not under consideration

1 VOTE

MDM CE - Web Server Misconfiguration: Unprotected Directory and Service Enumeration

Directory Enumeration vulnerabilities were discovered within your web application. Risks associated with an attacker discovering a directory on your application server depend upon what type of directory is discovered, and what types of files are c...

almost 6 years ago in Product Master 0 Not under consideration

1 VOTE

MDM CE - Insufficient File Upload Validation

It was found that validation when uploading files to the application is insufficient. The issue can also be exploited as a denial-of-service attack by uploading files of very large sizes or running multiple file uploads using a script which may co...

almost 6 years ago in Product Master 1 Not under consideration

1 VOTE

MDM CE - Information Disclosure - Exception Error Messages

"Unhandled exceptions are circumstances in which the application has received user input that it did not expect and does not know how to handle.Verbose error messages can be particularly useful during development and integration. However, in produ...

almost 6 years ago in Product Master 1 Not under consideration

1 VOTE

POST Parameters Accepted as GET Parameters

Some web frameworks collapse the POST and GET parameters into a single collection. This is a flawed design pattern from a security standpoint. If a page accepts POST parameters as GET parameters an attacker would be able to effect change on websit...

almost 6 years ago in Product Master 1 Not under consideration

1 VOTE

Refresh button and autorefresh option in colstep bulkedit UI

Hello, MDM team. There appeared a request from business users to add a refresh button and an autorefresh option into collaboration step bulk edit screen. That means, the entire bulkedit sheet can be manually or auto-refreshed without a need to lea...

almost 6 years ago in Product Master 1 Not under consideration

1 VOTE

Rich Search Report

When users run the rich search result report, the reports generated do contain the desired item detail information, but the reports do not contain information about the query which was used to retrieve the resulting item subset.

almost 6 years ago in Product Master 0 Not under consideration

1 VOTE

User ID and Password in SoapUI Header

Problem description and business impact : Using InfoSphere Master Data Management 11.6.0 on Redhat Linux, I observed in the SOAP WSDL interface, the Username and Password are passed in the SOAP Body instead of SOAP Header when doing a web service ...

almost 6 years ago in Master Data Management 1 Not under consideration

1 VOTE

Custom Standardization/Comparison Functions for IBM Virtual MDM 11.x

This is follow up to RFE #90568. The request was to provide custom algorithm extensions for Virtual MDM. IBM Support says that this only exists in Big Match today. If possible I would prefer if the extensions could be developed and configured in t...

almost 6 years ago in Master Data Management 1 Not under consideration

Please enter your email address

FILTER BY CATEGORY