Activity - BSN CDB Support - Penril Support System

Activity

From April 24, 2022 to May 23, 2022

May 19, 2022

16:03 Support #13018 (Closed - End of life cycle): [SCP ID :##6284##] : Rentas web service issue: Hi,
Kindly attend below request:-
RENTAS web service : failed to update status at rbg_bhi. Zahir Abd Latif
14:52 Support #13016 (Work Completed-End life cycle): [SCP ID :##6283##] : Jompay Charges not display i...: Hi,
Kindly attend below request:-
Issue
1) Amount deducted does not include charges
2) Transaction History and... Zahir Abd Latif

May 18, 2022

18:03 Task #12992 (Finished Development): [ANDROID] - Pentest - I2 - Application Screenshot (Unintended...: Change enable screenshots to disable screenshots in the onResume method. MUHAMMAD IHSAN
15:17 Support #12813 (System Integration Test): [SCP ID :##6150##] : Duitnow Immediate Reversal Error C...: Nurul Athira Abdul Rahim
14:43 Support #12961 (System Integration Test): [SCP ID :##6267##] : Fail receipt shown at Auto Debit B...: Nurul Athira Abdul Rahim

May 17, 2022

18:22 Task #12992 (Development / Work In Progress): [ANDROID] - Pentest - I2 - Application Screenshot (...: MUHAMMAD IHSAN
13:41 Task #12975 (Development / Work In Progress): [ANDROID] - L3 - Sensitive Information Leaked in Lo...: Rahmat Aina Nadia
13:39 Task #12988 (Finished Development): [ANDROID] - Pentest - L12 - Overly Permissive Permission: Rahmat Aina Nadia

May 13, 2022

17:50 Task #12990 (Development / Work In Progress): [IOS] - Pentest - L13 - App Transport Security (ATS...: Susanto Felix Brilliant

May 12, 2022

17:31 Support #12961: [SCP ID :##6267##] : Fail receipt shown at Auto Debit Billing: Tested & passed Nurul Syahirah Md Nawi
14:12 Support #12936: [SCP ID :##6250##] : Web Application Pentest Remediation: Add new H1 and M1 test result.
H1-screenshot from Firefox
M1-screenshot of removed unsecured library Najmi Pasarudin
14:05 Task #12984 (Internal Testing): Pentest - L8 - Parameter Tampering (Generate PDF): Issue:
Receipt PDF restful parameter can be modified
Finding:
Solution: Generate PDF parameter at middle-servic... Najmi Pasarudin
14:00 Support #12832 (User Acceptance Test): [SCP ID :##6168##] : Generate Report failed when select State: Hi Athira,
Item is ready for UAT. Najmi Pasarudin
14:00 Support #12832 (Development / Work In Progress): [SCP ID :##6168##] : Generate Report failed when...: Najmi Pasarudin
14:00 Support #12832 (Code Review): [SCP ID :##6168##] : Generate Report failed when select State: Najmi Pasarudin
13:59 Support #12775 (User Acceptance Test): [SCP ID :##6126##] : BSNeBiz Report for DuitNow - RFT115320: Hi Athira,
Item is ready for UAT. Najmi Pasarudin
13:59 Support #12775 (Development / Work In Progress): [SCP ID :##6126##] : BSNeBiz Report for DuitNow ...: Najmi Pasarudin
13:59 Support #12775 (Code Review): [SCP ID :##6126##] : BSNeBiz Report for DuitNow - RFT115320: Najmi Pasarudin
13:58 Support #12282 (User Acceptance Test): [SCP ID :##5970##] : IBAM Report - Transactional Summary: Hi Athira,
Item is ready for UAT. Najmi Pasarudin
13:58 Support #12282 (Development / Work In Progress): [SCP ID :##5970##] : IBAM Report - Transactional...: Najmi Pasarudin
13:58 Support #12282 (Code Review): [SCP ID :##5970##] : IBAM Report - Transactional Summary: Najmi Pasarudin
13:37 Support #12788 (User Acceptance Test): [SCP ID :##6139##] : B2B Posting Date Validation: Hi Athira,
This item has been deployed to UAT. Najmi Pasarudin
13:36 Support #12788 (Development / Work In Progress): [SCP ID :##6139##] : B2B Posting Date Validation: Najmi Pasarudin
13:36 Support #12788 (Code Review): [SCP ID :##6139##] : B2B Posting Date Validation: Najmi Pasarudin
13:15 Task #12979 (Development / Work In Progress): [IOS] - L5 - Application Backgrounding (Unintended ...: Susanto Felix Brilliant
12:49 Support #12961 (Internal Testing): [SCP ID :##6267##] : Fail receipt shown at Auto Debit Billing: Hi Athira,
Redmine has been updated to SIT. Please test. Najmi Pasarudin
12:48 Support #12961 (Development / Work In Progress): [SCP ID :##6267##] : Fail receipt shown at Auto ...: Najmi Pasarudin
12:48 Support #12961 (Code Review): [SCP ID :##6267##] : Fail receipt shown at Auto Debit Billing: Najmi Pasarudin
12:48 Support #12961: [SCP ID :##6267##] : Fail receipt shown at Auto Debit Billing: Issue:
Auto Debit file upload status is Pending Validate but the receipt stamp shows Failed
Finding:
Receipt doe... Najmi Pasarudin
12:19 Support #12282 (Pending UAT Deployment): [SCP ID :##5970##] : IBAM Report - Transactional Summary: Tested and passed by Firas on 11/5/22.
Kindly prepare the fixes and deploy to UAT environment Nurul Athira Abdul Rahim
12:18 Support #12775 (Pending UAT Deployment): [SCP ID :##6126##] : BSNeBiz Report for DuitNow - RFT115320: Tested and passed by Firas on 11/5/22.
Kindly prepare the fixes and deploy to UAT environment Nurul Athira Abdul Rahim
12:17 Support #12788 (Pending UAT Deployment): [SCP ID :##6139##] : B2B Posting Date Validation: Tested and passed by Firas on 11/5/22, kindly prepare the fixes to deploy to UAT environment. Nurul Athira Abdul Rahim
12:16 Support #12936 (Pending UAT Deployment): [SCP ID :##6250##] : Web Application Pentest Remediation: Tested and passed by Firas on 11/5/22
Kindly deploy the fixes to UAT environment Nurul Athira Abdul Rahim
12:14 Support #12832 (Pending UAT Deployment): [SCP ID :##6168##] : Generate Report failed when select ...: Tested and passed by Firas on 11/5/22
Please deploy the changes to UAT environment Nurul Athira Abdul Rahim
11:56 Task #12989 (Development / Work In Progress): [IOS] - Pentest - L12 - Overly Permissive Permission: Bin Hamzah Muhammad Fadhly
11:36 Task #12988 (Development / Work In Progress): [ANDROID] - Pentest - L12 - Overly Permissive Permi...: Rahmat Aina Nadia
10:16 Support #12813: [SCP ID :##6150##] : Duitnow Immediate Reversal Error Code Mapping and special ch...: Tested & passed Nurul Syahirah Md Nawi

May 11, 2022

13:53 Support #12759 (System Integration Test): [SCP ID :##6113##] : IBAM Report Enhancement: Nurul Athira Abdul Rahim
13:48 Task #12944 (System Integration Test): [SCP ID :##6249##] : Mobile Pentest Remediation M1 Insecur...: Nurul Athira Abdul Rahim
13:48 Task #12943 (System Integration Test): [SCP ID :##6249##] : Mobile Pentest Remediation M1 Insecur...: Nurul Athira Abdul Rahim
13:47 Support #12937 (System Integration Test): [SCP ID :##6251##] : Stop Payment / Reversal Maker Che...: Nurul Athira Abdul Rahim
11:58 Task #12992 (User Acceptance Test): [ANDROID] - Pentest - I2 - Application Screenshot (Unintended...: The application allows users to take a screenshot of the application's current state on their mobile device. Data may... Nurul Athira Abdul Rahim
11:56 Task #12991 (User Acceptance Test): [ANDROID] - Pentest - I1 - Application Allows Use of Third-Pa...: The application allows the use of third-party keyboards when entering sensitive data. A malicious third-party keyboar... Nurul Athira Abdul Rahim
10:40 Task #12990 (User Acceptance Test): [IOS] - Pentest - L13 - App Transport Security (ATS) Exceptio...: On Apple platforms, a networking security feature called App Transport Security (ATS) is available to apps and app ex... Nurul Athira Abdul Rahim
10:38 Task #12989 (User Acceptance Test): [IOS] - Pentest - L12 - Overly Permissive Permission: Mobile operating system assigns every installed application with a distinct system identity (Linux user ID and group ... Nurul Athira Abdul Rahim
10:37 Task #12988 (User Acceptance Test): [ANDROID] - Pentest - L12 - Overly Permissive Permission: Mobile operating system assigns every installed application with a distinct system identity (Linux user ID and group ... Nurul Athira Abdul Rahim
10:33 Task #12987 (Pending UAT Deployment): [ANDROID] - Pentest - L11 - Android Application Supports Cl...: The Android "clearTextTrafficPermitted" property is set to true in the application's Network Security Configuration f... Nurul Athira Abdul Rahim
10:31 Task #12986 (Pending UAT Deployment): Pentest - L10 - Circumvention of Workflow (OTP Bypass): During the application test, LGMS security team observed that it was possible to circumvent process workflows and byp... Nurul Athira Abdul Rahim
10:29 Task #12985 (Internal Testing): [SCP ID :##6249##] : Mobile Pentest Remediation - Pentest - L9 - ...: DuitNow fund transfers will look up the DuitNow ID and display the recipient's full name to allow the sender to verif... Nurul Athira Abdul Rahim
09:56 Task #12980 (Pending SIT Deployment): Pentest - L6 - Local Biometric Authentication Bypass: Similar to Support #12968 Najmi Pasarudin
09:56 Task #12968 (Pending SIT Deployment): [SCP ID :##6249##] : Mobile Pentest Remediation L1 Missing ...: Najmi Pasarudin
09:45 Support #12961 (Pending SIT Deployment): [SCP ID :##6267##] : Fail receipt shown at Auto Debit Bi...: Najmi Pasarudin
09:45 Support #12959 (Pending SIT Deployment): [SCP ID :##6266##] : DuitNow error: Najmi Pasarudin
09:44 Task #12984 (Pending SIT Deployment): Pentest - L8 - Parameter Tampering (Generate PDF): Najmi Pasarudin
09:17 Task #12984 (Development / Work In Progress): Pentest - L8 - Parameter Tampering (Generate PDF): Najmi Pasarudin

May 10, 2022

16:39 Task #12984 (User Acceptance Test): Pentest - L8 - Parameter Tampering (Generate PDF): At the time of assessment, LGMS security team identified that it is possible to generate a PDF receipt with tampered ... Nurul Athira Abdul Rahim
16:36 Task #12983 (Pending UAT Deployment): [IOS] - Pentest - L7 - Packet Replay (Fund Transfer): During the time of assessment, LGMS security team identified that packet replay for the fund transfer function is pos... Nurul Athira Abdul Rahim
16:35 Task #12982 (User Acceptance Test): [ANDROID] - Pentest - L7 - Packet Replay (Fund Transfer): During the time of assessment, LGMS security team identified that packet replay for the fund transfer function is pos... Nurul Athira Abdul Rahim
16:34 Task #12981 (Dropped-End of life cycle): Pentest - L7 - Packet Replay (Fund Transfer): During the time of assessment, LGMS security team identified that packet replay for the fund transfer function is pos... Nurul Athira Abdul Rahim
16:32 Task #12980 (Internal Testing): Pentest - L6 - Local Biometric Authentication Bypass: At the time of assessment, LGMS security team successfully bypassed the application's local biometric authentication ... Nurul Athira Abdul Rahim
16:30 Task #12979 (User Acceptance Test): [IOS] - L5 - Application Backgrounding (Unintended Data Leakage): Application that are minimized are in a suspended state. Mobile application caches a screenshot of the last screen of... Nurul Athira Abdul Rahim
16:26 Task #12978 (Development / Work In Progress): [IOS] - L4 - Missing Certificate/ Public Key Pinning: Pinning is the process of associating a host with their expected X509 certificate or public key. Once a certificate o... Nurul Athira Abdul Rahim
16:25 Task #12977 (Finished Development): [ANDROID] - L4 - Missing Certificate/ Public Key Pinning: Pinning is the process of associating a host with their expected X509 certificate or public key. Once a certificate o... Nurul Athira Abdul Rahim
16:23 Task #12976 (User Acceptance Test): [IOS] - L3 - Sensitive Information Leaked in Logs (Unintended...: Unintended data leakage occurs when a developer inadvertently places sensitive information or data in a location on t... Nurul Athira Abdul Rahim
16:22 Task #12975 (User Acceptance Test): [ANDROID] - L3 - Sensitive Information Leaked in Logs (Uninte...: Unintended data leakage occurs when a developer inadvertently places sensitive information or data in a location on t... Nurul Athira Abdul Rahim
16:19 Task #12974 (User Acceptance Test): [ANDROID] - Pentest - L2 No Server-Side Session Termination: At the time of assessment, LGMS security team identified that it is possible to access password protected functions u... Nurul Athira Abdul Rahim
16:18 Task #12973 (User Acceptance Test): [IOS] Pentest - L2 No Server-Side Session Termination: At the time of assessment, LGMS security team identified that it is possible to access password protected functions u... Nurul Athira Abdul Rahim
16:15 Task #12972 (Pending UAT Deployment): Pentest - L2 No Server-Side Session Termination: At the time of assessment, LGMS security team identified that it is possible to access password protected functions u... Nurul Athira Abdul Rahim
14:02 Support #12961 (Development / Work In Progress): [SCP ID :##6267##] : Fail receipt shown at Auto ...: Najmi Pasarudin
14:02 Support #12959 (Development / Work In Progress): [SCP ID :##6266##] : DuitNow error: Najmi Pasarudin
10:06 Task #12968 (Development / Work In Progress): [SCP ID :##6249##] : Mobile Pentest Remediation L1 ...: Najmi Pasarudin
10:05 Task #12968 (Internal Testing): [SCP ID :##6249##] : Mobile Pentest Remediation L1 Missing Functi...: Issue: Restful allows Payment and eStatement without password login
Finding: Restful relies on mobile password login... Najmi Pasarudin
09:37 Change #12942: [SCP ID :##6254##] : Delete button for New Application navigation.: Salam Hasnieza,
Please help to develop this enhancement.
Thank you. Najmi Pasarudin

May 09, 2022

12:51 Support #12937: [SCP ID :##6251##] : Stop Payment / Reversal Maker Checker: Tested & passed Nurul Syahirah Md Nawi

April 29, 2022

17:59 Support #12948: [SCP ID :##6256##] : Transaction History for 1Bank Lodgment Project: Tested & passed Nurul Syahirah Md Nawi
12:54 Support #12961 (Work Completed-End life cycle): [SCP ID :##6267##] : Fail receipt shown at Auto D...: Hi,
Kindly attend below request:-
Auto Debit Billing - File Upload gave Fail receipt but the transaction is succe... Zahir Abd Latif
12:18 Task #12944: [SCP ID :##6249##] : Mobile Pentest Remediation M1 Insecure Direct Object Reference ...: Tested & passed Nurul Syahirah Md Nawi
12:13 Task #12944 (Internal Testing): [SCP ID :##6249##] : Mobile Pentest Remediation M1 Insecure Direc...: Nurul Syahirah Md Nawi
11:33 Change #12942 (Development / Work In Progress): [SCP ID :##6254##] : Delete button for New Applic...: Najmi Pasarudin
11:13 Support #12959 (Closed - End of life cycle): [SCP ID :##6266##] : DuitNow error: Hi,
Kindly attend below request:-
Duitnow error due to Unsynchronized time at APP1 server.
Zahir Abd Latif

April 28, 2022

00:09 Support #12948 (Internal Testing): [SCP ID :##6256##] : Transaction History for 1Bank Lodgment P...: Simulation testing:
# Enable 2 company account with one of them is Giro-i
# Access BSNeBiz and make an Own account ... Najmi Pasarudin
00:02 Support #12948 (Development / Work In Progress): [SCP ID :##6256##] : Transaction History for 1B...: Najmi Pasarudin
00:01 Support #12948 (Finished Development): [SCP ID :##6256##] : Transaction History for 1Bank Lodgme...: Najmi Pasarudin
13:22 Support #12937 (Internal Testing): [SCP ID :##6251##] : Stop Payment / Reversal Maker Checker: Najmi Pasarudin
10:53 Support #12937 (Development / Work In Progress): [SCP ID :##6251##] : Stop Payment / Reversal Ma...: Najmi Pasarudin
10:53 Support #12937 (Finished Development): [SCP ID :##6251##] : Stop Payment / Reversal Maker Checker: Najmi Pasarudin

April 27, 2022

16:19 Task #12944: [SCP ID :##6249##] : Mobile Pentest Remediation M1 Insecure Direct Object Reference ...: Please test pentest the build 270 (VPN Penril) and build 271 (internal BSN) Susanto Felix Brilliant
14:44 Support #12890 (Pending Prod Deployment): [SCP ID :##6220##] : Update backup program: Tested and passed by Asrul on 250422 Nurul Athira Abdul Rahim
14:43 Support #12904 (Pending Prod Deployment): [SCP ID :##6233##] : Add & as valid special char in Fil...: Tested and passed by Asrul on 250422 Nurul Athira Abdul Rahim
14:42 Support #12907 (Pending Prod Deployment): [SCP ID :##6236##] : DB CPU High: Tested and passed by Asrul on 250422 Nurul Athira Abdul Rahim

April 26, 2022

02:17 Support #12948 (Pending SIT Deployment): [SCP ID :##6256##] : Transaction History for 1Bank Lodg...: Najmi Pasarudin
00:20 Support #12937 (Pending SIT Deployment): [SCP ID :##6251##] : Stop Payment / Reversal Maker Checker: Issue:
Error at IBAM Pending/Approval Stop/Reverse Detail Payment
Finding:
IBAM code failed to generate details ... Najmi Pasarudin
16:43 Change #12942: [SCP ID :##6254##] : Delete button for New Application navigation.: To review Nurul Athira Abdul Rahim
12:11 Task #12943: [SCP ID :##6249##] : Mobile Pentest Remediation M1 Insecure Direct Object Reference ...: Tested & passed Nurul Syahirah Md Nawi

April 25, 2022

17:17 Support #12937 (Development / Work In Progress): [SCP ID :##6251##] : Stop Payment / Reversal Ma...: Najmi Pasarudin
16:03 Support #12948 (System Integration Test): [SCP ID :##6256##] : Transaction History for 1Bank Lod...: Hi,
Kindly attend below request:-
Transaction history to contain:
1. Transaction date -done
2. Organization Cod... Zahir Abd Latif
14:20 Task #12943 (Internal Testing): [SCP ID :##6249##] : Mobile Pentest Remediation M1 Insecure Direc...: Rahmat Aina Nadia
11:13 Task #12943 (Development / Work In Progress): [SCP ID :##6249##] : Mobile Pentest Remediation M1 ...: Rahmat Aina Nadia

Also available in: Atom