Uploaded image for project: 'Acumos'
  1. Acumos
  2. ACUMOS-2757

Portal allows unauthenticated users to fetch OR (company) models and shows JWT values

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Critical
    • Resolution: Done
    • Affects Version/s: pm-2.2.7
    • Fix Version/s: pm-2.2.11
    • Component/s: portal-marketplace
    • Labels:
      None

      Description

      This REST endpoint is open, meaning it allows unauthenticated users to fetch the list of OR ("company") visible solutions.  You must post a JSON block to use this endpoint, which is shown below.

      http://cognita-dev1-vm01-core.eastus.cloudapp.azure.com/api/portal/solutions

      Please revise to close this hole appropriately, thank you.

        Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

            • Assignee:
              swood8 Samuel Wood
              Reporter:
              cl778h Chris Lott
            • Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: