All ideas

Showing 15356

Convert DSNACCEL Database to UTS w/o TOTAL Outage for HA Customers with Replication

PTF for APAR PI91467/UI54612 is something we picked up with RSU1806 this fall, I was planning to perform this work in 2019. We are not experiencing any time out issues. But, have plans to migrate to DB2 V12 in 2019. I am aware that this database/t...

almost 6 years ago in Db2 for z/OS 1 Not under consideration

1 VOTE

MDM CE - Server Information Disclosure

Revealing server information or system data helps an attacker learn about the technologies used by the application, which can aid him in forming a plan of attack. The information revealed could then be abused to craft more effective exploits again...

almost 6 years ago in Product Master 0 Not under consideration

1 VOTE

MDM CE - Web application crawling rules not specified

"Pages containing sensitive information may be indexed, and subsequently cached, by a spider or robot that has discovered the MacLeaseAU application. A particularly thorough and intelligent spider or robot may even be able to find confidential inf...

almost 6 years ago in Product Master 1 Not under consideration

1 VOTE

MDM CE - Web Server Misconfiguration: Unprotected Directory and Service Enumeration

Directory Enumeration vulnerabilities were discovered within your web application. Risks associated with an attacker discovering a directory on your application server depend upon what type of directory is discovered, and what types of files are c...

almost 6 years ago in Product Master 0 Not under consideration

1 VOTE

MDM CE - Insufficient File Upload Validation

It was found that validation when uploading files to the application is insufficient. The issue can also be exploited as a denial-of-service attack by uploading files of very large sizes or running multiple file uploads using a script which may co...

almost 6 years ago in Product Master 1 Not under consideration

1 VOTE

MDM CE - Information Disclosure - Exception Error Messages

"Unhandled exceptions are circumstances in which the application has received user input that it did not expect and does not know how to handle.Verbose error messages can be particularly useful during development and integration. However, in produ...

almost 6 years ago in Product Master 1 Not under consideration

1 VOTE

POST Parameters Accepted as GET Parameters

Some web frameworks collapse the POST and GET parameters into a single collection. This is a flawed design pattern from a security standpoint. If a page accepts POST parameters as GET parameters an attacker would be able to effect change on websit...

almost 6 years ago in Product Master 1 Not under consideration

1 VOTE

Refresh button and autorefresh option in colstep bulkedit UI

Hello, MDM team. There appeared a request from business users to add a refresh button and an autorefresh option into collaboration step bulk edit screen. That means, the entire bulkedit sheet can be manually or auto-refreshed without a need to lea...

almost 6 years ago in Product Master 1 Not under consideration

1 VOTE

Rich Search Report

When users run the rich search result report, the reports generated do contain the desired item detail information, but the reports do not contain information about the query which was used to retrieve the resulting item subset.

almost 6 years ago in Product Master 0 Not under consideration

1 VOTE

User ID and Password in SoapUI Header

Problem description and business impact : Using InfoSphere Master Data Management 11.6.0 on Redhat Linux, I observed in the SOAP WSDL interface, the Username and Password are passed in the SOAP Body instead of SOAP Header when doing a web service ...

almost 6 years ago in Master Data Management 1 Not under consideration

Please enter your email address

FILTER BY CATEGORY