Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CP 7.0 - Revert "Merge pull request #1708 from ProgrammeVitam/CP_BUG_12507_Date_Search" #1889

Merged
merged 1 commit into from
May 31, 2024

Conversation

Regzox
Copy link
Contributor

@Regzox Regzox commented May 31, 2024

Description

Description des modifications

Type de changement

Indiquer le ou les types de changements

  • Build
  • PKI
  • Ansiblerie
  • Nouveau Code
  • Correction
  • Refactorisation de code
  • Autre

Documentation

Indiquer la documentation mise à jour

  • Quels sont les nouvelles documentations ?
  • Quels sont les modifications existantes ?
  • Quels sont les documentations ou sections de documentations supprimés ?

Tests

Indiquer comment le code à été testé (manuel, environnement, TU, etc)

  • manuel
  • environnement
  • TU

Migration

Indiquer si les modifications apportées impliquent une migration sur l'existant et comment la faire

Checklist

Sélectionner les éléments de la checklist

  • Mon code suit le style de code de ce projet.
  • J'ai commenté mon code, en particulier dans les classes et les méthodes difficile à comprendre.
  • J'ai fait les changements correspondant dans la documentation RAML.
  • J'ai fait les changements correspondant dans la documentation Métier.
  • J'ai fait les changements correspondant dans la documentation Technique.
  • J'ai rajouté les tests unitaires vérifiant mes fonctionnalités.
  • J'ai rajouté les tests de non régression vérifiant mes fonctionnalités.
  • Les tests unitaires nouveaux et existants passent avec succès localement.
  • Toutes les dépendances ont été mergées en priorité

Contributeur

Indiquer qui a développé cette fonctionnalité

  • VAS (Vitam Accessible en Service)
  • CEA (Commissariat à l'énergie atomique et aux énergies alternatives)

…e_Search"

This reverts commit cd5fe08, reversing
changes made to 0a1146b.
@Regzox Regzox added bug Something isn't working small pr embarquant peu de changements et à review rapide, ne nécessitant qu'un reviewer VAS VAS contribution Cherry-Pick a cherry pick labels May 31, 2024
@Regzox Regzox added this to the IT 136 milestone May 31, 2024
@Regzox Regzox requested review from ebernard and GiooDev May 31, 2024 12:00
@Regzox Regzox self-assigned this May 31, 2024
@Regzox Regzox changed the base branch from develop to master_7.0.x May 31, 2024 12:01
@GiooDev GiooDev changed the title Revert master 7.0.x CP 7.0 - Revert "Merge pull request #1708 from ProgrammeVitam/CP_BUG_12507_Date_Search" May 31, 2024
@vitam-devops
Copy link
Collaborator

Logo
Checkmarx One – Scan Summary & Details7009bef8-7862-4dbe-b35d-4a8d7649738a

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH CVE-2015-4852 Maven-commons-collections:commons-collections-3.2.1 Vulnerable Package
HIGH CVE-2015-6420 Maven-commons-collections:commons-collections-3.2.1 Vulnerable Package
HIGH CVE-2015-7501 Maven-commons-collections:commons-collections-3.2.1 Vulnerable Package
HIGH CVE-2016-2170 Maven-commons-collections:commons-collections-3.2.1 Vulnerable Package
HIGH CVE-2019-15599 Npm-tree-kill-1.2.1 Vulnerable Package
HIGH CVE-2020-13936 Maven-org.apache.velocity:velocity-1.7 Vulnerable Package
HIGH CVE-2020-28491 Maven-com.fasterxml.jackson.dataformat:jackson-dataformat-cbor-2.6.7 Vulnerable Package
HIGH CVE-2020-28502 Npm-xmlhttprequest-ssl-1.5.5 Vulnerable Package
HIGH CVE-2020-36048 Npm-engine.io-3.2.1 Vulnerable Package
HIGH CVE-2020-36049 Npm-socket.io-parser-3.2.0 Vulnerable Package
HIGH CVE-2020-7660 Npm-serialize-javascript-1.9.1 Vulnerable Package
HIGH CVE-2020-7788 Npm-ini-1.3.5 Vulnerable Package
HIGH CVE-2021-31597 Npm-xmlhttprequest-ssl-1.5.5 Vulnerable Package
HIGH CVE-2021-33813 Maven-org.jdom:jdom2-2.0.6 Vulnerable Package
HIGH CVE-2021-37136 Maven-io.netty:netty-codec-4.1.65.Final Vulnerable Package
HIGH CVE-2021-37137 Maven-io.netty:netty-codec-4.1.65.Final Vulnerable Package
HIGH CVE-2021-40690 Maven-org.apache.santuario:xmlsec-2.1.6 Vulnerable Package
HIGH CVE-2021-43466 Maven-org.thymeleaf:thymeleaf-spring5-3.0.12.RELEASE Vulnerable Package
HIGH CVE-2022-0265 Maven-com.hazelcast:hazelcast-4.2.2 Vulnerable Package
HIGH CVE-2022-2421 Npm-socket.io-parser-3.2.0 Vulnerable Package
HIGH CVE-2022-25857 Maven-org.yaml:snakeyaml-1.29 Vulnerable Package
HIGH CVE-2022-25857 Maven-org.yaml:snakeyaml-1.28 Vulnerable Package
HIGH CVE-2022-28366 Maven-net.sourceforge.htmlunit:neko-htmlunit-2.24 Vulnerable Package
HIGH CVE-2022-36437 Maven-com.hazelcast:hazelcast-4.2.2 Vulnerable Package
HIGH CVE-2022-42252 Maven-org.apache.tomcat.embed:tomcat-embed-core-9.0.63 Vulnerable Package
HIGH CVE-2022-45143 Maven-org.apache.tomcat.embed:tomcat-embed-core-9.0.63 Vulnerable Package
HIGH CVE-2023-24998 Maven-org.apache.tomcat.embed:tomcat-embed-core-9.0.63 Vulnerable Package
HIGH CVE-2023-6378 Maven-ch.qos.logback:logback-classic-1.2.9 Vulnerable Package
HIGH CVE-2023-6378 Maven-ch.qos.logback:logback-core-1.2.9 Vulnerable Package
HIGH CVE-2023-6481 Maven-ch.qos.logback:logback-core-1.2.9 Vulnerable Package
HIGH Client_DOM_XSS /cas/cas-server/src/main/resources/static/js/duo/Duo-Web-v2.min.js: [136](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//cas/cas-server/src/main/resources/static/js/duo/Duo-Web-v2.min.js# L136) Attack Vector
HIGH Cxb3498186-093f Maven-org.freemarker:freemarker-2.3.29 Vulnerable Package
HIGH Cxb3498186-093f Maven-org.freemarker:freemarker-2.3.20 Vulnerable Package
HIGH Passwords And Secrets - Generic Password /vitamui_vars.yml: [298](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//deployment/environments/group_vars/all/vitamui_vars.yml# L298) Query to find passwords and secrets in infrastructure code.
HIGH Reflected_XSS_All_Clients /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/InternalSecurityService.java: [118](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/InternalSecurityService.java# L118) Attack Vector
HIGH Reflected_XSS_All_Clients /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/InternalSecurityService.java: [118](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/InternalSecurityService.java# L118) Attack Vector
MEDIUM Absolute_Path_Traversal /ui/ui-pastis/src/main/java/fr/gouv/vitamui/pastis/rest/ProfileController.java: [245](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//ui/ui-pastis/src/main/java/fr/gouv/vitamui/pastis/rest/ProfileController.java# L245) Attack Vector
MEDIUM Absolute_Path_Traversal /ui/ui-referential/src/main/java/fr/gouv/vitamui/referential/rest/RuleController.java: [219](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//ui/ui-referential/src/main/java/fr/gouv/vitamui/referential/rest/RuleController.java# L219) Attack Vector
MEDIUM Absolute_Path_Traversal /ui/ui-commons/src/main/java/fr/gouv/vitamui/ui/commons/rest/RuleController.java: [211](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//ui/ui-commons/src/main/java/fr/gouv/vitamui/ui/commons/rest/RuleController.java# L211) Attack Vector
MEDIUM Absolute_Path_Traversal /ui/ui-pastis/src/main/java/fr/gouv/vitamui/pastis/rest/ArchivalProfileUnitController.java: [211](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//ui/ui-pastis/src/main/java/fr/gouv/vitamui/pastis/rest/ArchivalProfileUnitController.java# L211) Attack Vector
MEDIUM Absolute_Path_Traversal /ui/ui-pastis/src/main/java/fr/gouv/vitamui/pastis/rest/PastisController.java: [99](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//ui/ui-pastis/src/main/java/fr/gouv/vitamui/pastis/rest/PastisController.java# L99) Attack Vector
MEDIUM Absolute_Path_Traversal /ui/ui-referential/src/main/java/fr/gouv/vitamui/referential/rest/FileFormatController.java: [244](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//ui/ui-referential/src/main/java/fr/gouv/vitamui/referential/rest/FileFormatController.java# L244) Attack Vector
MEDIUM Absolute_Path_Traversal /ui/ui-referential/src/main/java/fr/gouv/vitamui/referential/rest/AgencyController.java: [214](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//ui/ui-referential/src/main/java/fr/gouv/vitamui/referential/rest/AgencyController.java# L214) Attack Vector
MEDIUM Absolute_Path_Traversal /api/api-referential/referential-external/src/main/java/fr/gouv/vitamui/referential/external/server/rest/ProfileExternalController.java: [209](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-referential/referential-external/src/main/java/fr/gouv/vitamui/referential/external/server/rest/ProfileExternalController.java# L209) Attack Vector
MEDIUM Absolute_Path_Traversal /ui/ui-referential/src/main/java/fr/gouv/vitamui/referential/rest/OntologyController.java: [206](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//ui/ui-referential/src/main/java/fr/gouv/vitamui/referential/rest/OntologyController.java# L206) Attack Vector
MEDIUM Absolute_Path_Traversal /api/api-referential/referential-internal/src/main/java/fr/gouv/vitamui/referential/internal/server/rest/ProfileInternalController.java: [199](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-referential/referential-internal/src/main/java/fr/gouv/vitamui/referential/internal/server/rest/ProfileInternalController.java# L199) Attack Vector
MEDIUM Absolute_Path_Traversal /api/api-referential/referential-internal/src/main/java/fr/gouv/vitamui/referential/internal/server/rest/FileFormatInternalController.java: [193](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-referential/referential-internal/src/main/java/fr/gouv/vitamui/referential/internal/server/rest/FileFormatInternalController.java# L193) Attack Vector
MEDIUM Absolute_Path_Traversal /api/api-referential/referential-internal/src/main/java/fr/gouv/vitamui/referential/internal/server/rest/OntologyInternalController.java: [189](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-referential/referential-internal/src/main/java/fr/gouv/vitamui/referential/internal/server/rest/OntologyInternalController.java# L189) Attack Vector
MEDIUM Absolute_Path_Traversal /api/api-referential/referential-internal/src/main/java/fr/gouv/vitamui/referential/internal/server/rest/ArchivalProfileUnitInternalController.java: [153](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-referential/referential-internal/src/main/java/fr/gouv/vitamui/referential/internal/server/rest/ArchivalProfileUnitInternalController.java# L153) Attack Vector
MEDIUM Absolute_Path_Traversal /api/api-referential/referential-external/src/main/java/fr/gouv/vitamui/referential/external/server/rest/ProfileExternalController.java: [150](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-referential/referential-external/src/main/java/fr/gouv/vitamui/referential/external/server/rest/ProfileExternalController.java# L150) Attack Vector
MEDIUM Absolute_Path_Traversal /ui/ui-ingest/src/main/java/fr/gouv/vitamui/ingest/rest/IngestController.java: [147](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//ui/ui-ingest/src/main/java/fr/gouv/vitamui/ingest/rest/IngestController.java# L147) Attack Vector
MEDIUM CVE-2016-10735 Npm-bootstrap-3.3.6 Vulnerable Package
MEDIUM CVE-2018-14040 Npm-bootstrap-3.3.6 Vulnerable Package
MEDIUM CVE-2018-14042 Npm-bootstrap-3.3.6 Vulnerable Package
MEDIUM CVE-2018-20676 Npm-bootstrap-3.3.6 Vulnerable Package
MEDIUM CVE-2018-20677 Npm-bootstrap-3.3.6 Vulnerable Package
MEDIUM CVE-2019-16769 Npm-serialize-javascript-1.9.1 Vulnerable Package
MEDIUM CVE-2019-8331 Npm-bootstrap-3.3.6 Vulnerable Package
MEDIUM CVE-2020-15366 Npm-ajv-6.10.0 Vulnerable Package
MEDIUM CVE-2020-15366 Npm-ajv-5.5.2 Vulnerable Package
MEDIUM CVE-2020-28481 Npm-socket.io-2.1.1 Vulnerable Package
MEDIUM CVE-2020-7693 Npm-sockjs-0.3.19 Vulnerable Package
MEDIUM CVE-2021-23364 Npm-browserslist-4.5.5 Vulnerable Package
MEDIUM CVE-2022-21704 Npm-log4js-4.5.1 Vulnerable Package
MEDIUM CVE-2022-24823 Maven-io.netty:netty-common-4.1.65.Final Vulnerable Package
MEDIUM CVE-2022-38749 Maven-org.yaml:snakeyaml-1.28 Vulnerable Package
MEDIUM CVE-2022-38749 Maven-org.yaml:snakeyaml-1.29 Vulnerable Package
MEDIUM CVE-2022-38750 Maven-org.yaml:snakeyaml-1.28 Vulnerable Package
MEDIUM CVE-2022-38750 Maven-org.yaml:snakeyaml-1.29 Vulnerable Package
MEDIUM CVE-2022-38751 Maven-org.yaml:snakeyaml-1.28 Vulnerable Package
MEDIUM CVE-2022-38751 Maven-org.yaml:snakeyaml-1.29 Vulnerable Package
MEDIUM CVE-2022-38752 Maven-org.yaml:snakeyaml-1.29 Vulnerable Package
MEDIUM CVE-2022-38752 Maven-org.yaml:snakeyaml-1.28 Vulnerable Package
MEDIUM CVE-2022-41854 Maven-org.yaml:snakeyaml-1.29 Vulnerable Package
MEDIUM CVE-2022-41854 Maven-org.yaml:snakeyaml-1.28 Vulnerable Package
MEDIUM CVE-2022-41940 Npm-engine.io-3.2.1 Vulnerable Package
MEDIUM CVE-2023-28708 Maven-org.apache.tomcat.embed:tomcat-embed-core-9.0.63 Vulnerable Package
MEDIUM CVE-2024-25710 Maven-org.apache.commons:commons-compress-1.21 Vulnerable Package
MEDIUM CVE-2024-26308 Maven-org.apache.commons:commons-compress-1.21 Vulnerable Package
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/api-iam/iam-commons/src/main/java/fr/gouv/vitamui/iam/common/utils/IdentityProviderBuilder.java: [153](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-commons/src/main/java/fr/gouv/vitamui/iam/common/utils/IdentityProviderBuilder.java# L153) Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/api-iam/iam-commons/src/main/java/fr/gouv/vitamui/iam/common/utils/IdentityProviderBuilder.java: [169](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-commons/src/main/java/fr/gouv/vitamui/iam/common/utils/IdentityProviderBuilder.java# L169) Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/api-iam/iam-commons/src/main/java/fr/gouv/vitamui/iam/common/utils/IdentityProviderBuilder.java: [166](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-commons/src/main/java/fr/gouv/vitamui/iam/common/utils/IdentityProviderBuilder.java# L166) Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/api-iam/iam-internal/src/main/java/fr/gouv/vitamui/iam/internal/server/user/service/UserEmailInternalService.java: [99](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-internal/src/main/java/fr/gouv/vitamui/iam/internal/server/user/service/UserEmailInternalService.java# L99) Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/provider/ExternalApiAuthenticationProvider.java: [88](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/provider/ExternalApiAuthenticationProvider.java# L88) Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/api-iam/iam-external-client/src/main/java/fr/gouv/vitamui/iam/external/client/CasExternalRestClient.java: [79](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-external-client/src/main/java/fr/gouv/vitamui/iam/external/client/CasExternalRestClient.java# L79) Attack Vector
MEDIUM Client_Privacy_Violation /cas/cas-server/src/main/resources/static/js/passwordMeter.js: [23](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//cas/cas-server/src/main/resources/static/js/passwordMeter.js# L23) Attack Vector
MEDIUM Container Traffic Not Bound To Host Interface /mongo_cluster.yml: [37](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//tools/docker/mongo/mongo_cluster.yml# L37) Incoming container traffic should be bound to a specific host interface
MEDIUM Container Traffic Not Bound To Host Interface /mongo_cluster.yml: [15](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//tools/docker/mongo/mongo_cluster.yml# L15) Incoming container traffic should be bound to a specific host interface
MEDIUM Container Traffic Not Bound To Host Interface /mongo_cluster.yml: [58](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//tools/docker/mongo/mongo_cluster.yml# L58) Incoming container traffic should be bound to a specific host interface
MEDIUM Cxf0b588a3-5c6f Npm-jquery-2.2.4 Vulnerable Package
MEDIUM Healthcheck Not Set /mongo_cluster.yml: [26](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//tools/docker/mongo/mongo_cluster.yml# L26) Check containers periodically to see if they are running properly.
MEDIUM Healthcheck Not Set /mongo_cluster.yml: [47](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//tools/docker/mongo/mongo_cluster.yml# L47) Check containers periodically to see if they are running properly.
MEDIUM HttpOnlyCookies /ui/ui-commons/src/main/java/fr/gouv/vitamui/ui/commons/security/CookieClearingLogoutHandler.java: [64](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//ui/ui-commons/src/main/java/fr/gouv/vitamui/ui/commons/security/CookieClearingLogoutHandler.java# L64) Attack Vector
MEDIUM Memory Not Limited /mongo_cluster.yml: [47](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//tools/docker/mongo/mongo_cluster.yml# L47) Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than t...
MEDIUM Memory Not Limited /mongo_cluster.yml: [26](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//tools/docker/mongo/mongo_cluster.yml# L26) Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than t...
MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/InternalSecurityService.java: [118](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/InternalSecurityService.java# L118) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/InternalSecurityService.java: [118](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/InternalSecurityService.java# L118) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/InternalSecurityService.java: [110](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/InternalSecurityService.java# L110) Attack Vector
MEDIUM Privacy_Violation /ui/ui-identity/src/main/java/fr/gouv/vitamui/identity/service/ProviderService.java: [214](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//ui/ui-identity/src/main/java/fr/gouv/vitamui/identity/service/ProviderService.java# L214) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-commons/src/main/java/fr/gouv/vitamui/iam/common/utils/IdentityProviderBuilder.java: [111](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-commons/src/main/java/fr/gouv/vitamui/iam/common/utils/IdentityProviderBuilder.java# L111) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-commons/src/main/java/fr/gouv/vitamui/iam/common/utils/IdentityProviderBuilder.java: [110](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-commons/src/main/java/fr/gouv/vitamui/iam/common/utils/IdentityProviderBuilder.java# L110) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/InternalSecurityService.java: [118](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/InternalSecurityService.java# L118) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/InternalSecurityService.java: [118](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/InternalSecurityService.java# L118) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/InternalSecurityService.java: [110](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/InternalSecurityService.java# L110) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-internal/src/main/java/fr/gouv/vitamui/iam/internal/server/rest/CasInternalController.java: [183](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-internal/src/main/java/fr/gouv/vitamui/iam/internal/server/rest/CasInternalController.java# L183) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-internal/src/main/java/fr/gouv/vitamui/iam/internal/server/rest/CasInternalController.java: [183](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-internal/src/main/java/fr/gouv/vitamui/iam/internal/server/rest/CasInternalController.java# L183) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-internal-client/src/main/java/fr/gouv/vitamui/iam/internal/client/UserInternalRestClient.java: [84](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-internal-client/src/main/java/fr/gouv/vitamui/iam/internal/client/UserInternalRestClient.java# L84) Attack Vector
MEDIUM Privacy_Violation /ui/ui-identity/src/main/java/fr/gouv/vitamui/identity/service/ProviderService.java: [214](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//ui/ui-identity/src/main/java/fr/gouv/vitamui/identity/service/ProviderService.java# L214) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-commons/src/main/java/fr/gouv/vitamui/iam/common/utils/IdentityProviderBuilder.java: [111](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-commons/src/main/java/fr/gouv/vitamui/iam/common/utils/IdentityProviderBuilder.java# L111) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-commons/src/main/java/fr/gouv/vitamui/iam/common/utils/IdentityProviderBuilder.java: [110](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-commons/src/main/java/fr/gouv/vitamui/iam/common/utils/IdentityProviderBuilder.java# L110) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-internal/src/main/java/fr/gouv/vitamui/iam/internal/server/idp/converter/IdentityProviderConverter.java: [155](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-internal/src/main/java/fr/gouv/vitamui/iam/internal/server/idp/converter/IdentityProviderConverter.java# L155) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-internal/src/main/java/fr/gouv/vitamui/iam/internal/server/rest/CasInternalController.java: [185](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-internal/src/main/java/fr/gouv/vitamui/iam/internal/server/rest/CasInternalController.java# L185) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-external-client/src/main/java/fr/gouv/vitamui/iam/external/client/CasExternalRestClient.java: [135](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-external-client/src/main/java/fr/gouv/vitamui/iam/external/client/CasExternalRestClient.java# L135) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-internal/src/main/java/fr/gouv/vitamui/iam/internal/server/rest/CasInternalController.java: [183](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-internal/src/main/java/fr/gouv/vitamui/iam/internal/server/rest/CasInternalController.java# L183) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-external/src/main/java/fr/gouv/vitamui/iam/external/server/rest/CasExternalController.java: [100](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-external/src/main/java/fr/gouv/vitamui/iam/external/server/rest/CasExternalController.java# L100) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-internal/src/main/java/fr/gouv/vitamui/iam/internal/server/idp/converter/IdentityProviderConverter.java: [155](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-internal/src/main/java/fr/gouv/vitamui/iam/internal/server/idp/converter/IdentityProviderConverter.java# L155) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-external-client/src/main/java/fr/gouv/vitamui/iam/external/client/CasExternalRestClient.java: [135](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-external-client/src/main/java/fr/gouv/vitamui/iam/external/client/CasExternalRestClient.java# L135) Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-internal/src/main/java/fr/gouv/vitamui/iam/internal/server/rest/CasInternalController.java: [183](https://github.com/ProgrammeVitam/vitam-ui/blob/revert__master_7.0.x//api/api-iam/iam-internal/src/main/java/fr/gouv/vitamui/iam/internal/server/rest/CasInternalController.java# L183) Attack Vector
MEDIUM Privacy_Violation

More results are available on AST platform

@Regzox Regzox merged commit fd35837 into master_7.0.x May 31, 2024
1 check passed
@Regzox Regzox deleted the revert__master_7.0.x branch May 31, 2024 12:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working Cherry-Pick a cherry pick small pr embarquant peu de changements et à review rapide, ne nécessitant qu'un reviewer VAS VAS contribution
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants