All ideas

Showing 15558

Enhance DISPLAY GROUPBUFFERPOOL output

Enhance DISPLAY GROUPBUFFERPOOL output to display both the current and the high-water-mark number of updated data pages in a global buffer pool. Since the AUTOALTER facility may change the number of pages in the buffer, this new information should...

almost 12 years ago in Db2 for z/OS 1 Not under consideration

1 VOTE

Provide HTTP API for listing data asset members

It allows specifying members who can view the asset attachments but there's no API for retrieving members of an asset. Such verb will be very useful if it uses a chatbot to serving user requests as broker, so that it won't need user to provide the...

almost 6 years ago in Knowledge Catalog 0 Not under consideration

1 VOTE

Convert DSNACCEL Database to UTS w/o TOTAL Outage for HA Customers with Replication

PTF for APAR PI91467/UI54612 is something we picked up with RSU1806 this fall, I was planning to perform this work in 2019. We are not experiencing any time out issues. But, have plans to migrate to DB2 V12 in 2019. I am aware that this database/t...

almost 6 years ago in Db2 for z/OS 1 Not under consideration

1 VOTE

MDM CE - Server Information Disclosure

Revealing server information or system data helps an attacker learn about the technologies used by the application, which can aid him in forming a plan of attack. The information revealed could then be abused to craft more effective exploits again...

almost 6 years ago in Product Master 0 Not under consideration

1 VOTE

MDM CE - Web application crawling rules not specified

"Pages containing sensitive information may be indexed, and subsequently cached, by a spider or robot that has discovered the MacLeaseAU application. A particularly thorough and intelligent spider or robot may even be able to find confidential inf...

almost 6 years ago in Product Master 1 Not under consideration

1 VOTE

MDM CE - Web Server Misconfiguration: Unprotected Directory and Service Enumeration

Directory Enumeration vulnerabilities were discovered within your web application. Risks associated with an attacker discovering a directory on your application server depend upon what type of directory is discovered, and what types of files are c...

almost 6 years ago in Product Master 0 Not under consideration

1 VOTE

MDM CE - Insufficient File Upload Validation

It was found that validation when uploading files to the application is insufficient. The issue can also be exploited as a denial-of-service attack by uploading files of very large sizes or running multiple file uploads using a script which may co...

almost 6 years ago in Product Master 1 Not under consideration

1 VOTE

MDM CE - Information Disclosure - Exception Error Messages

"Unhandled exceptions are circumstances in which the application has received user input that it did not expect and does not know how to handle.Verbose error messages can be particularly useful during development and integration. However, in produ...

almost 6 years ago in Product Master 1 Not under consideration

1 VOTE

POST Parameters Accepted as GET Parameters

Some web frameworks collapse the POST and GET parameters into a single collection. This is a flawed design pattern from a security standpoint. If a page accepts POST parameters as GET parameters an attacker would be able to effect change on websit...

almost 6 years ago in Product Master 1 Not under consideration

1 VOTE

Refresh button and autorefresh option in colstep bulkedit UI

Hello, MDM team. There appeared a request from business users to add a refresh button and an autorefresh option into collaboration step bulk edit screen. That means, the entire bulkedit sheet can be manually or auto-refreshed without a need to lea...

almost 6 years ago in Product Master 1 Not under consideration

Please enter your email address

FILTER BY CATEGORY