Product Master

Showing 192

Default hierarchy attribute for Search On for use in Workflow

There is no way we can create one hierarchy attribute as Default, Search On attribute for searching category in hierarchy in for use in Workflow/Collaboration Area?Reference Case Number: TS001854442

about 5 years ago in Product Master 2 Functionality already exists

1 VOTE

MDM CE Session is not destroyed when the password is reset

When a password has been changed by a user it does not destroy all current sessions associated with that user account server-side. As a result, if there are concurrent connections using the same credentials (perhaps due to a user account compromis...

over 5 years ago in Product Master 0 Planned for future release

1 VOTE

MDM CE - Server Information Disclosure

Revealing server information or system data helps an attacker learn about the technologies used by the application, which can aid him in forming a plan of attack. The information revealed could then be abused to craft more effective exploits again...

over 5 years ago in Product Master 0 Not under consideration

1 VOTE

MDM CE - Web application crawling rules not specified

"Pages containing sensitive information may be indexed, and subsequently cached, by a spider or robot that has discovered the MacLeaseAU application. A particularly thorough and intelligent spider or robot may even be able to find confidential inf...

over 5 years ago in Product Master 1 Not under consideration

1 VOTE

MDM CE - Web Server Misconfiguration: Unprotected Directory and Service Enumeration

Directory Enumeration vulnerabilities were discovered within your web application. Risks associated with an attacker discovering a directory on your application server depend upon what type of directory is discovered, and what types of files are c...

over 5 years ago in Product Master 0 Not under consideration

1 VOTE

MDM CE - Insufficient File Upload Validation

It was found that validation when uploading files to the application is insufficient. The issue can also be exploited as a denial-of-service attack by uploading files of very large sizes or running multiple file uploads using a script which may co...

over 5 years ago in Product Master 1 Not under consideration

1 VOTE

MDM CE - Information Disclosure - Exception Error Messages

"Unhandled exceptions are circumstances in which the application has received user input that it did not expect and does not know how to handle.Verbose error messages can be particularly useful during development and integration. However, in produ...

over 5 years ago in Product Master 1 Not under consideration

1 VOTE

POST Parameters Accepted as GET Parameters

Some web frameworks collapse the POST and GET parameters into a single collection. This is a flawed design pattern from a security standpoint. If a page accepts POST parameters as GET parameters an attacker would be able to effect change on websit...

over 5 years ago in Product Master 1 Not under consideration

1 VOTE

Refresh button and autorefresh option in colstep bulkedit UI

Hello, MDM team. There appeared a request from business users to add a refresh button and an autorefresh option into collaboration step bulk edit screen. That means, the entire bulkedit sheet can be manually or auto-refreshed without a need to lea...

over 5 years ago in Product Master 1 Not under consideration

1 VOTE

Rich Search Report

When users run the rich search result report, the reports generated do contain the desired item detail information, but the reports do not contain information about the query which was used to retrieve the resulting item subset.

over 5 years ago in Product Master 0 Not under consideration

Please enter your email address

FILTER BY CATEGORY