Support #13284

[SCP ID :##6485##] : VAPT Findings - BIF-102517 - Kelemahan Backdate Create Custome Report Generator

Added by Zahir Abd Latif almost 2 years ago. Updated almost 2 years ago.

Status:Closed - End of life cycleStart date:October 26, 2022
Priority:NormalDue date:
Assignee:Zahir Abd Latif% Done:

100%

Category:-Spent time:-
Target version:-

Description

Hi,
Kindly attend below request:-

Deskripsi :

Pengujian pada aplikasi BIFAST menunjukan aplikasi memiliki kelemahan backdate terhadap fungsi create custom report generator

Situs Target :

http://10.170.136.228/bifast-portal//getOTP?userAlias=[username]

Rekomendasi :

Kami sarankan untuk implementasi verifikasi pada tanggal yang digunakan dalam fungsi untuk mencegah serangan backdate

6. Kelemahan Backdate - Create Custom Generator.png (486 KB) Zahir Abd Latif, October 26, 2022 19:48

6.1 Kelemahan Backdate - Create Custom Generator.png (167 KB) Zahir Abd Latif, October 26, 2022 19:48

6.2 Kelemahan Backdate - Create Custom Generator.png (590 KB) Zahir Abd Latif, October 26, 2022 19:48

History

#1 Updated by Stephanie Sufrapto almost 2 years ago

  • Status changed from New - Begin Life Cycle to User Acceptance Test
  • Assignee changed from Bramantyo Pujo Wiyono to Zahir Abd Latif
  • % Done changed from 0 to 100

Provide patch Version 2.0.105 at 8 October 2022

#2 Updated by Zahir Abd Latif almost 2 years ago

  • Status changed from User Acceptance Test to Closed - End of life cycle

Issue closed in SCP.

Also available in: Atom PDF