[WEBCLIENT-343] Fix Veracode identified Security flaws in i2b2Webclient Code - i2b2 JIRA

Details

Type: Improvement
Status: Open
Priority: Major
Resolution: Will Fix
Affects Version/s: None
Fix Version/s: 1.7.14
Component/s: None
Labels:
None

Description

Veracode security report 8/2020- , recommendation to fix i2b2-webclient code to fix High Security flaws to be policy compliant
Module Name Compiler Operating Environment
JS files within i2b2-webclient.zip JAVASCRIPT_5_1 JavaScript
PHP files within i2b2-webclient.zip PHP_5 PHP

List of identified Files:
Module Location
PHP files within i2b2-webclient.zip i2b2-webclient/.../admin.php 83
JS files within i2b2- webclient.zip /i2b2-webclient/.../c3code/c3.js 238
JS files within i2b2- webclient.zip /i2b2-webclient/.../c3code/c3.js 3303
JS files within i2b2- webclient.zip /i2b2-webclient/.../c3code/c3.js 3323
JS files within i2b2- webclient.zip /i2b2-webclient/.../c3code/c3.js 3947
JS files within i2b2- webclient.zip /i2b2-webclient/.../c3code/c3.js 3957
JS files within i2b2- webclient.zip /i2b2-webclient/.../c3code/c3.js 4767
JS files within i2b2- webclient.zip /i2b2-webclient/.../c3code/c3.js 5025
JS files within i2b2- webclient.zip /i2b2-webclient/.../c3code/c3.js 5038
JS files within i2b2- webclient.zip /i2b2-webclient/.../c3code/c3.js 5047
PHP files within i2b2-webclient.zip i2b2-webclient/.../helper.php 62
PHP files within i2b2-webclient.zip i2b2-webclient/.../helper.php 186
PHP files within i2b2-webclient.zip i2b2-webclient/index.php 212
PHP files within i2b2-webclient.zip .../installConfirm.php 65
PHP files within i2b2-webclient.zip .../installConfirm.php 78
PHP files within i2b2-webclient.zip .../installConfirm.php 98
PHP files within i2b2-webclient.zip i2b2-webclient/.../admin.php 83
JS files within i2b2- webclient.zip /i2b2-webclient/.../c3code/c3.js 238
JS files within i2b2- webclient.zip /i2b2-webclient/.../c3code/c3.js 3303
JS files within i2b2- webclient.zip /i2b2-webclient/.../c3code/c3.js 3323
JS files within i2b2- webclient.zip /i2b2-webclient/.../c3code/c3.js 3947
JS files within i2b2- webclient.zip /i2b2-webclient/.../c3code/c3.js 3957
JS files within i2b2- webclient.zip /i2b2-webclient/.../c3code/c3.js 4767
JS files within i2b2- webclient.zip /i2b2-webclient/.../c3code/c3.js 5025
JS files within i2b2- webclient.zip /i2b2-webclient/.../c3code/c3.js 5038
JS files within i2b2- webclient.zip /i2b2-webclient/.../c3code/c3.js 5047
PHP files within i2b2-webclient.zip i2b2-webclient/.../helper.php 62
PHP files within i2b2-webclient.zip i2b2-webclient/.../helper.php 186
PHP files within i2b2-webclient.zip i2b2-webclient/index.php 212
PHP files within i2b2-webclient.zip .../installConfirm.php 65
PHP files within i2b2-webclient.zip .../installConfirm.php 78
PHP files within i2b2-webclient.zip .../installConfirm.php 98

Attachments

Activity

Ascending order - Click to sort in descending order

Reeta Metta created issue - 02/Feb/21 1:26 PM

Reeta Metta made changes - 02/Feb/21 1:50 PM

Field	Original Value	New Value
Fix Version/s		1.7.13 [ 11002 ]
Resolution		Will Fix [ 10200 ]

Reeta Metta made changes - 02/Feb/21 1:50 PM

Assignee

Jeffrey Klann [ jklann ]

Reeta Metta made changes - 02/Feb/21 2:09 PM

Issue Type

Bug [ 1 ]

Task [ 3 ]

Jeffrey Klann made changes - 11/May/22 8:19 PM

Assignee	Jeffrey Klann [ jklann ]	Mike Mendis [ mem61 ]
Issue Type	Task [ 3 ]	Improvement [ 4 ]
Status	New [ 10000 ]	Open [ 1 ]

Jeffrey Klann made changes - 17/May/22 7:57 PM

Fix Version/s		1.7.14 [ 11200 ]
Fix Version/s	1.7.13 [ 11002 ]

Jeffrey Klann added a comment - 17/May/22 7:57 PM

Deferred because no internal projects need further changes.

Jeffrey Klann added a comment - 17/May/22 7:57 PM Deferred because no internal projects need further changes.

People

Assignee:: Mike Mendis

Reporter:: Reeta Metta

Participant/s:: Jeffrey Klann, Mike Mendis, Reeta Metta

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 02/Feb/21 1:26 PM

Updated:: 17/May/22 7:57 PM

Resolved:: 11/May/22 8:19 PM

i2b2 Web Client