Activity
From August 18, 2022 to September 16, 2022
September 14, 2022
- 16:35 Task #13209 (Finished Development): HUAWEI - L5 - Partial Source Code Obfuscation
- The team tested the application to check the code obfuscation. Using Java Decompiler allows the team to read the sour...
- 10:31 Task #13214 (Finished Development): HUAWEI - I1 - Application Can Be Used In Emulator
- The team tested the application to run in the emulator by using Virtual Device on Android Studio and Genymotion to te...
September 13, 2022
- 21:06 Support #13222 (Internal Testing): [SCP ID :##6426##] : Creation Date Bug
- Issue:
BSNeBiz Application date is wrong in report
Finding:
IBAM>CBE>BSNeBiz Application has bug. At page 1, aft... - 08:37 Support #13222 (Development / Work In Progress): [SCP ID :##6426##] : Creation Date Bug
September 12, 2022
- 17:05 Task #13211 (Finished Development): HUAWEI - L7 - Private IP Addresses Disclosed (Unintended Data...
- The IP addresses will be removed before release.
- 12:25 Task #13203: HUAWEI - H1 - Unencrypted Communications
- for Production APK, the HTTP communications and public IP address are not permitted and will give the server under ma...
- 12:14 Task #13205: HUAWEI - L1 - Android usesCleartextTraffic Enabled
- Using manifestPlaceholders in build.gradle(:app), usesCleartextTraffic will be set to "false" when building signed apk.
- 11:05 Support #13195 (System Integration Test): [SCP ID :##6411##] : PruBSN file
- There are steps that require JTM parts. Proceed to SIT. Azyan will test end to end.
- 10:19 Task #13203 (Finished Development): HUAWEI - H1 - Unencrypted Communications
- 09:42 Support #13222 (Work Completed-End life cycle): [SCP ID :##6426##] : Creation Date Bug
- Hi,
Kindly attend below request:-
Bug at IBAM>CBE>BSNeBiz Application. Everytime admin updates page 1(Organizatio...
September 09, 2022
- 18:37 Task #13210 (Finished Development): HUAWEI - L6 - Overly Permissive Permission
- Permission updated following Android fixes.
- 18:35 Task #13213 (Finished Development): HUAWEI - L9 - Android Application Supports Cleartext Traffic
- set usesCleartextTraffic to false on signed build apk
- 18:34 Task #13205 (Finished Development): HUAWEI - L1 - Android usesCleartextTraffic Enabled
- set usesCleartextTraffic to false on signed build apk
- 11:23 Support #13073 (Work Completed-End life cycle): [SCP ID :##6323##] : Increase description length ...
- Migration ID0059
- 11:22 Support #13110 (Work Completed-End life cycle): [SCP ID :##6358##] : FA/FR File date time to defa...
- Migration ID0059
- 11:20 Support #12787 (Work Completed-End life cycle): [SCP ID :##6138##] : ePFG - Allow today's date fo...
- Migration ID0059
- 11:19 Support #12813 (Work Completed-End life cycle): [SCP ID :##6150##] : Duitnow Immediate Reversal E...
- Migration ID0059
- 11:18 Support #12961 (Work Completed-End life cycle): [SCP ID :##6267##] : Fail receipt shown at Auto D...
- Migration ID0059
- 11:17 Support #12938 (Work Completed-End life cycle): [SCP ID :##6252##] : COnverted EPFG file unable...
- Migration ID0059
- 11:15 Support #12936 (Work Completed-End life cycle): [SCP ID :##6250##] : Web Application Pentest Reme...
- Migration ID0059
- 11:14 Support #12830 (Work Completed-End life cycle): [SCP ID :##6166##] : Audit trail status not sync
- Migration ID0059
- 11:06 Support #12788 (Work Completed-End life cycle): [SCP ID :##6139##] : B2B Posting Date Validation
- Migration ID0059
- 11:04 Support #12284 (Work Completed-End life cycle): [SCP ID :##5971##] : Transaction History - Captur...
- Migration ID0059
- 10:22 Task #13210 (Development / Work In Progress): HUAWEI - L6 - Overly Permissive Permission
September 08, 2022
- 17:58 Task #13205 (Development / Work In Progress): HUAWEI - L1 - Android usesCleartextTraffic Enabled
- 17:58 Task #13213 (Development / Work In Progress): HUAWEI - L9 - Android Application Supports Cleartex...
- 12:09 Support #13158 (System Integration Test): [SCP ID :##6398##] : Rentas transaction fail due to Val...
- Tested and Passed
- 12:05 Task #13207 (Finished Development): HUAWEI - L3 - Local Biometric Authentication Bypass
- Integrate login Fingerprint service
September 07, 2022
- 17:36 Task #13214 (Closed - End of life cycle): HUAWEI - I1 - Application Can Be Used In Emulator
- Description :
The application can be used in an emulator and does not implement emulator detection to defend again... - 17:34 Task #13213 (Closed - End of life cycle): HUAWEI - L9 - Android Application Supports Cleartext Tr...
- Description :
The Android "clearTextTrafficPermitted" property is set to true in the application's Network Security... - 17:32 Task #13212 (New - Begin Life Cycle): HUAWEI - L8 - Unsupported Android Version
- Description :
The application can be installed/used on versions of Android which no longer have support for updates... - 17:30 Task #13211 (Closed - End of life cycle): HUAWEI - L7 - Private IP Addresses Disclosed (Unintende...
- Description :
LGMS security team identified private IP addresses stored within the mobile application installer pac... - 17:28 Task #13210 (Closed - End of life cycle): HUAWEI - L6 - Overly Permissive Permission
- Description :
Mobile operating system assigns every installed application with a distinct system identity (Linux us... - 17:26 Task #13209 (Closed - End of life cycle): HUAWEI - L5 - Partial Source Code Obfuscation
- Desription :
Obfuscation is a technique employed to hide the intent of an application. The techniques used to obscu... - 17:24 Task #13208 (New - Begin Life Cycle): HUAWEI - L4 - Misconfiguration "Content-Security-Policy" He...
- Description:
The "Content-Security-Policy" (CSP) header is designed to modify the way browsers and WebViews render ... - 17:21 Task #13207 (Closed - End of life cycle): HUAWEI - L3 - Local Biometric Authentication Bypass
- Description :
At the time of assessment, LGMS security team successfully bypassed the application's local biometr... - 17:19 Task #13206 (Closed - End of life cycle): HUAWEI - L2 - Missing Certificate/ Public Key Pinning
- Description :
Pinning is the process of associating a host with their expected X509 certificate or public key. Once... - 17:16 Task #13205 (Closed - End of life cycle): HUAWEI - L1 - Android usesCleartextTraffic Enabled
- Description:
The android:usesCleartextTraffic flag indicates whether the app intends to use cleartext network traffi... - 17:14 Task #13204 (Closed - End of life cycle): HUAWEI - M1 - Lack of Code Integrity Checks
- Description :
At the time of assessment, LGMS security team identified that the mobile application does not detect ... - 17:11 Task #13203 (Closed - End of life cycle): HUAWEI - H1 - Unencrypted Communications
- Description :
The application allows users to connect to it over unencrypted connections. An attacker suitably po... - 17:09 Task #13202 (New - Begin Life Cycle): Huawei Pentest Remidiation
- Kindly attend below request:-
Huawei Mobile Pentest Remediation
- 15:51 Support #13201 (Work Completed-End life cycle): [SCP ID :##6418##] : Android - Session Creation F...
- Hi,
Kindly attend below request:-
Mobile: Android
Apps Version: 1.9.3
Issue: Error prompt 'Session creation fai... - 14:32 Support #13195 (Internal Testing): [SCP ID :##6411##] : PruBSN file
- Requirement:
# Enable company setting for PruBSN
# Preprare PruBSN file upload
Test steps:
# Access BSNeBiz CDB... - 14:18 Support #13195 (Development / Work In Progress): [SCP ID :##6411##] : PruBSN file
September 05, 2022
- 11:48 Support #13132 (System Integration Test): [SCP ID :##6380 ##] : Enable Loan Account and Batch Wi...
- 11:46 Support #13147 (System Integration Test): [SCP ID :##6389##] : Application Form Expired notification
- 11:06 Support #13195 (Work Completed-End life cycle): [SCP ID :##6411##] : PruBSN file
- Hi,
Kindly attend below request:-
Request to:
1. Merge content for Purchase and Others in 1 file (differentiate ...
September 02, 2022
- 16:01 Support #13147: [SCP ID :##6389##] : Application Form Expired notification
- Tested and Passed
September 01, 2022
- 16:20 Support #13135 (Pending Customer Feedback): [SCP ID :##6383 ##] : Balance Display at CDB
- After discussion with Asrul,
credit limit only applied for premium accounts. For current web service we got
no indi... - 16:19 Support #13135 (Development / Work In Progress): [SCP ID :##6383 ##] : Balance Display at CDB
- 16:18 Support #13135 (Finished Development): [SCP ID :##6383 ##] : Balance Display at CDB
August 30, 2022
- 17:18 Support #13135 (Pending SIT Deployment): [SCP ID :##6383 ##] : Balance Display at CDB
- 17:18 Support #13135 (Development / Work In Progress): [SCP ID :##6383 ##] : Balance Display at CDB
- 15:44 Support #13190 (Work Completed-End life cycle): [SCP ID :##6407##] : System to disable to send Te...
- Hi,
Kindly attend below request:-
Current CDB can sent Temporary password upon FALSE answer at Security Question.... - 14:43 Enhancement #13058 (Work Completed-End life cycle): [SCP ID :##6313##] : BSNebiz Summary Report
- 14:43 Support #12907 (Work Completed-End life cycle): [SCP ID :##6236##] : DB CPU High
- 14:42 Support #13039 (Work Completed-End life cycle): [SCP ID :##6295##] : RENTAS - Transactional Summa...
- 14:42 Support #12904 (Work Completed-End life cycle): [SCP ID :##6233##] : Add & as valid special char ...
- 14:41 Support #12890 (Work Completed-End life cycle): [SCP ID :##6220##] : Update backup program
- 14:40 Support #12828 (Work Completed-End life cycle): [SCP ID :##6164##] : IBM DB2 Backup Taking longer...
- 14:39 Support #12775 (Work Completed-End life cycle): [SCP ID :##6126##] : BSNeBiz Report for DuitNow -...
- 14:38 Support #12282 (Work Completed-End life cycle): [SCP ID :##5970##] : IBAM Report - Transactional ...
- 14:29 Support #13113 (Work Completed-End life cycle): [SCP ID :##6361##] : IBAM Authorization Log Templ...
- Deployed to prod on 02/08/2022
Migration ID0058 - 14:27 Support #12832 (Work Completed-End life cycle): [SCP ID :##6168##] : Generate Report failed when ...
- 14:26 Support #13096 (Work Completed-End life cycle): [SCP ID :##6345##] : Issue BSNeBiz Summary Report
August 29, 2022
- 15:26 Support #13132: [SCP ID :##6380 ##] : Enable Loan Account and Batch Window
- Tested and Passed.
- 09:31 Support #13110 (Pending Review): [SCP ID :##6358##] : FA/FR File date time to default to 000000000
- Production deployed on 26/08/2022
- 09:31 Support #12813 (Pending Review): [SCP ID :##6150##] : Duitnow Immediate Reversal Error Code Mappi...
- Production deployed on 26/08/2022
- 09:31 Support #13073 (Pending Review): [SCP ID :##6323##] : Increase description length for BBE - Notice
- Production deployed on 26/08/2022
- 09:31 Support #12787 (Pending Review): [SCP ID :##6138##] : ePFG - Allow today's date for multiple batch
- Production deployed on 26/08/2022
- 09:31 Support #12938 (Pending Review): [SCP ID :##6252##] : COnverted EPFG file unable to upload to P...
- Production deployed on 26/08/2022
- 09:31 Support #12961 (Pending Review): [SCP ID :##6267##] : Fail receipt shown at Auto Debit Billing
- Production deployed on 26/08/2022
- 09:30 Support #12284 (Pending Review): [SCP ID :##5971##] : Transaction History - Capture data from TSI...
- Production deployed on 26/08/2022
- 09:30 Support #12788 (Pending Review): [SCP ID :##6139##] : B2B Posting Date Validation
- Production deployed on 26/08/2022
- 09:30 Support #12830 (Pending Review): [SCP ID :##6166##] : Audit trail status not sync
- Production deployed on 26/08/2022
- 09:30 Support #12936 (Pending Review): [SCP ID :##6250##] : Web Application Pentest Remediation
- Production deployed on 26/08/2022
August 26, 2022
- 18:00 Support #13155: [SCP ID :##6395##] : JomPay Off Us - PERKASA REALTY
- Tested by JTM on JomPAY chopping report.
Please proceed *BSN Daily and exception report* development. - 17:58 Support #13155 (Development / Work In Progress): [SCP ID :##6395##] : JomPay Off Us - PERKASA REALTY
- 17:09 Support #13158 (Internal Testing): [SCP ID :##6398##] : Rentas transaction fail due to ValueDT
- Issue:
Approver approver RENTAS the next day but recipient bank reject
Finding:
BSNeBiz set RENTAS request messa... - 15:44 Support #13155 (User Acceptance Test): [SCP ID :##6395##] : JomPay Off Us - PERKASA REALTY
- 12:45 Support #13118 (System Integration Test): [SCP ID :##6366##] : iGFMAS Second Validation
- 12:27 Support #13063 (System Integration Test): [SCP ID :##6317##] : SFTP program keep on retry failed ...
- 08:23 Support #13110 (Pending Prod Deployment): [SCP ID :##6358##] : FA/FR File date time to default to...
- 08:22 Support #12936 (Pending Prod Deployment): [SCP ID :##6250##] : Web Application Pentest Remediation
- 08:22 Support #12936 (New - Begin Life Cycle): [SCP ID :##6250##] : Web Application Pentest Remediation
- 08:22 Support #12936 (Code Review): [SCP ID :##6250##] : Web Application Pentest Remediation
- 08:22 Support #12830 (Pending Prod Deployment): [SCP ID :##6166##] : Audit trail status not sync
- 08:21 Support #12788 (Pending Prod Deployment): [SCP ID :##6139##] : B2B Posting Date Validation
- 08:21 Support #12284 (Pending Prod Deployment): [SCP ID :##5971##] : Transaction History - Capture data...
- 08:21 Support #12961 (Pending Prod Deployment): [SCP ID :##6267##] : Fail receipt shown at Auto Debit B...
- 08:21 Support #12938 (Pending Prod Deployment): [SCP ID :##6252##] : COnverted EPFG file unable to up...
- 08:20 Support #12787 (Pending Prod Deployment): [SCP ID :##6138##] : ePFG - Allow today's date for mult...
- 08:20 Support #13073 (Pending Prod Deployment): [SCP ID :##6323##] : Increase description length for BB...
- 08:20 Support #12813 (Pending Prod Deployment): [SCP ID :##6150##] : Duitnow Immediate Reversal Error C...
August 25, 2022
- 15:36 Support #13118: [SCP ID :##6366##] : iGFMAS Second Validation
- Issue:
BSN request to add account and IC validation for HR512 B2B bulk payment file
Solution:
Update batch progr... - 14:37 Support #13118 (Internal Testing): [SCP ID :##6366##] : iGFMAS Second Validation
- 14:23 Support #13118 (Finished Development): [SCP ID :##6366##] : iGFMAS Second Validation
- 14:22 Support #13132 (Internal Testing): [SCP ID :##6380 ##] : Enable Loan Account and Batch Window
- Issue:
En.Rahmat request to auto-enable Loan account and Batch Window setting
Solution:
# Auto-enable Loan accou... - 13:00 Support #13132 (Finished Development): [SCP ID :##6380 ##] : Enable Loan Account and Batch Window
- 09:37 Support #12961 (User Acceptance Test): [SCP ID :##6267##] : Fail receipt shown at Auto Debit Billing
- 09:36 Support #12938 (User Acceptance Test): [SCP ID :##6252##] : COnverted EPFG file unable to uploa...
- 09:35 Support #12887 (User Acceptance Test): [SCP ID :##6217##] : SOCSO Monthly Report & Invoice
August 24, 2022
- 17:25 Support #12905 (User Acceptance Test): [SCP ID :##6234##] : Loan - Remove field in Confirmation, ...
- 17:24 Support #13073 (User Acceptance Test): [SCP ID :##6323##] : Increase description length for BBE -...
- 17:23 Support #12813 (User Acceptance Test): [SCP ID :##6150##] : Duitnow Immediate Reversal Error Code...
- 17:23 Support #12937 (User Acceptance Test): [SCP ID :##6251##] : Stop Payment / Reversal Maker Checker
- 17:22 Support #12759 (User Acceptance Test): [SCP ID :##6113##] : IBAM Report Enhancement
- 12:15 Support #13146 (System Integration Test): [SCP ID :##6388##] : Duit now error - Sender ID has sym...
- Tested and passed.
- 09:37 Support #13132 (Pending SIT Deployment): [SCP ID :##6380 ##] : Enable Loan Account and Batch Window
August 23, 2022
- 15:32 Support #13132 (Development / Work In Progress): [SCP ID :##6380 ##] : Enable Loan Account and B...
- 10:28 Support #13118 (Pending SIT Deployment): [SCP ID :##6366##] : iGFMAS Second Validation
- 09:34 Support #13147 (Internal Testing): [SCP ID :##6389##] : Application Form Expired notification
- SIT deploy in 23/08/22. Kindly retest.
Application form should be new,
creationDate should be after 00:00:00 min... - 09:10 Support #13135 (Pending Customer Feedback): [SCP ID :##6383 ##] : Balance Display at CDB
- JTM already test the accounting balance in SIT and send email to ICBS team and En. Rahmat to verify (Pending reply).
August 22, 2022
- 09:49 Support #13118: [SCP ID :##6366##] : iGFMAS Second Validation
- Reply from Asrul
> Salam Najmi,
>
> Refer green colour font for the reply.
>
>
>
> 1. Is the validat...
August 19, 2022
- 18:24 Support #13147 (Finished Development): [SCP ID :##6389##] : Application Form Expired notification
- 11:52 Support #13158 (Development / Work In Progress): [SCP ID :##6398##] : Rentas transaction fail due...
- 11:02 Support #13147 (Development / Work In Progress): [SCP ID :##6389##] : Application Form Expired no...
- 09:36 Support #13155 (Internal Testing): [SCP ID :##6395##] : JomPay Off Us - PERKASA REALTY
- Change request:
Update batch program for new SPP report for Jompay
Test steps:
# Testing is done by BSN
# Make ... - 09:31 Support #13155 (Development / Work In Progress): [SCP ID :##6395##] : JomPay Off Us - PERKASA REALTY
- 09:30 Support #13155 (Finished Development): [SCP ID :##6395##] : JomPay Off Us - PERKASA REALTY
August 18, 2022
- 17:35 Support #13158 (Work Completed-End life cycle): [SCP ID :##6398##] : Rentas transaction fail due ...
- Hi,
Kindly attend below request:-
Set approved date in RENTAS transaction as ValueDt in RENTAS web service.
...
Also available in: Atom