Skip to content
Sign in
Failed

Changes

Summary

  1. [ApiRsMonitoraggio] (commit: a16398e) (details)
  2. [GovWayConsole, GovWayMonitor] (commit: bb37a7f) (details)
Commit a16398e15aa32221ba0e7379f3ea3ecd4d7c3068 by Andrea Poli
[ApiRsMonitoraggio]
Risolto problema in cui venivano serializzate le informazioni sul contenuto, senza la presenza del content-type obbligatorio.
 (commit: a16398e)
The file was modifiedcore/src/org/openspcoop2/pdd/logger/traccia/Converter.java (diff)
Commit bb37a7f140c4bd2181f68c863be6c3a4aada2e39 by Andrea Poli
[GovWayConsole, GovWayMonitor]
Sono state risolte le seguenti vulnerabilità relative alle console di gestione e monitoraggio:
- CWE-307 (Brute Force)
- CWE-384 (Session Fixation)

Squashed commit of the following:

commit 8660d71a59698a523aa99572c385f29a39d050bc
Author: Giuliano Pintori <pintori@link.it>
Date:   Fri Oct 3 18:19:24 2025 +0200

    [GovWayConsole]
    Aggiunte classi mancanti.

commit 9fc7225bf311740df08bc89c2629ef89177d4a5e
Author: Giuliano Pintori <pintori@link.it>
Date:   Thu Oct 2 11:38:24 2025 +0200

    [GovWayConsole]
    Risolte segnalazioni Session Fixation (CWE-384) e Mancanza di restrizioni sui tentativi di autenticazione (CWE-307).

    [GovWayMonitor]
    Risolte segnalazioni Session Fixation (CWE-384) e Mancanza di restrizioni sui tentativi di autenticazione (CWE-307).
 (commit: bb37a7f)
The file was addedresources/doc/src/manuali/vulnerability-management/securityAdvisory/2025/CWE-384.rst
The file was modifiedtools/web_interfaces/monitor/src/src_core/org/openspcoop2/web/monitor/core/filters/PrincipalFilter.java (diff)
The file was modifiedtools/web_interfaces/control_station/src/org/openspcoop2/web/ctrlstat/core/ControlStationCore.java (diff)
The file was addedtools/web_interfaces/lib/mvc/src/org/openspcoop2/web/lib/mvc/login/LoginAttempt.java
The file was addedtools/web_interfaces/control_station/testsuite/verifica_accesso_console_gestione.sh
The file was modifiedtools/web_interfaces/control_station/src/org/openspcoop2/web/ctrlstat/servlet/login/Logout.java (diff)
The file was modifiedtools/web_interfaces/monitor/src/src_core/org/openspcoop2/web/monitor/core/listener/ConsoleStartupListener.java (diff)
The file was modifiedtools/web_interfaces/monitor/src/src_core/org/openspcoop2/web/monitor/core/core/PddMonitorProperties.java (diff)
The file was addedtools/web_interfaces/lib/mvc/src/org/openspcoop2/web/lib/mvc/login/FailedAttempts.java
The file was modifiedtools/web_interfaces/control_station/src/org/openspcoop2/web/ctrlstat/servlet/login/Login.java (diff)
The file was addedtools/web_interfaces/lib/mvc/src/org/openspcoop2/web/lib/mvc/login/package.html
The file was modifiedtools/web_interfaces/lib/mvc/src/org/openspcoop2/web/lib/mvc/ServletUtils.java (diff)
The file was modifiedtools/web_interfaces/control_station/deploy/properties/console.properties (diff)
The file was modifiedtools/web_interfaces/control_station/src/org/openspcoop2/web/ctrlstat/core/InitListener.java (diff)
The file was modifiedtools/web_interfaces/monitor/src/src_core/org/openspcoop2/web/monitor/core/dao/ILoginDAO.java (diff)
The file was addedtools/web_interfaces/lib/mvc/src/org/openspcoop2/web/lib/mvc/login/LoginException.java
The file was modifiedtools/web_interfaces/control_station/src/org/openspcoop2/web/ctrlstat/servlet/login/AuthorizationFilter.java (diff)
The file was modifiedtools/web_interfaces/control_station/src/org/openspcoop2/web/ctrlstat/servlet/login/LoginHelper.java (diff)
The file was addedtools/web_interfaces/monitor/testsuite/verifica_accesso_console_monitoraggio.sh
The file was modifiedresources/doc/src/manuali/vulnerability-management/securityAdvisory/2025/index.rst (diff)
The file was modifiedtools/web_interfaces/monitor/src/src_core/org/openspcoop2/web/monitor/core/dao/DBLoginDAO.java (diff)
The file was modifiedtools/web_interfaces/monitor/deploy/properties/monitor.properties (diff)
The file was modifiedChangeLog (diff)
The file was addedresources/doc/src/manuali/vulnerability-management/securityAdvisory/2025/CWE-307.rst
The file was modifiedtools/web_interfaces/monitor/src/src_core/org/openspcoop2/web/monitor/core/bean/LoginBean.java (diff)
The file was modifiedtools/web_interfaces/control_station/src/org/openspcoop2/web/ctrlstat/config/ConsoleProperties.java (diff)
The file was modifiedtools/web_interfaces/monitor/src/src_core/org/openspcoop2/web/monitor/core/bean/AbstractLoginBean.java (diff)