Follow on Google News News By Tag Industry News News By Place Country(s) Industry News
Follow on Google News | Software development the express way - new software release (1.3.1) is outThis release contains security related fixes. Users should update both, the main application and the code generator named lbDMF-CAB-DevExpress-Generator-Compilation-1.3.1.exe that addresses the issue. Affected UML model: StsManagement.
Before this release a modeled password was hidden only at an obvious place, but leaked at a place were it was not addressed that explicitely. To be precise, the non obvious parts in the application were reports and lookup controls that link to the entities containing that security related field. Example: In this release the intention to hide security related stuff was fixed. Also similar issues will be addressable. Download products Distributed Multiplatform Framework and CAB DevExpress Codegenerator Compilation. Other products do operate locally by using Sqlite and are thus not critical and will be addressed later. If users have created the StsManagement software using it productive, have to update the code by regenerating it. As a reference the above picture shows the SecurityUsers_ Note: The password is a salted value that then gets hashed. So it was at no time possible to extract the clear text version of the password. Visit the products page for more details: http://www.lollisoft.de/ Lollisoft Software Development creates software that help developers in the requirements analysis stage and later in the development of database related software. Using UML and code generation techniques, developers can reduce time to market and also reduce errors in code compared to manual software development. End
Account Email Address Account Phone Number Disclaimer Report Abuse
|
|