Uploaded image for project: 'SEBA'
  1. SEBA
  2. SEBA-480

DynamicLoad API does not require authentication

    XMLWordPrintable

    Details

    • Type: Story
    • Status: Resolved (View Workflow)
    • Priority: High
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: February
    • Component/s: NEM
    • Labels:
      None

      Description

      LoadModels and UnloadModels can be executed without authentication. This presents a security vulnerability.

        Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

            Assignee:
            scottb Scott Baker
            Reporter:
            scottb Scott Baker
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Gerrit Reviews

                There are no open Gerrit changes