[2021-01-26] Change Log – Kiuwan

ET2

QAK-6415 PARSE ERROR para fichero PL/SQL
QAK-6433 Rule definition for OPT.PHP.AvoidExitorDie references to an invalid URL
QAK-6434 Rule definition for OPT.PHP.AvoidSQLQueriesWithinLoop references to an invalid URL
QAK-6436 Parsing error file in PL/SQL in CREATE sentence
QAK-6444 PARSE ERROR for Transact-SQL with OVER(...) No,Name sentence
QAK-6450 PARSE ERROR for file PL/SQL
QAK-6451 Parsing errors in Transact-SQL files
QAK-6453 PARSE ERROR in PL/SQL file when use IS NOT NULL in case statement
QAK-6455 ERROR java.lang.NullPointerException on OPT.JAVA.SEC_JAVA.InsecureSSL
QAK-6462 Parsing errors Transact-SQL when PERSISTED keyword is used
QAK-6480 Parsing errors in PHP interface function definition

ET4

QAK-5037 QAK-4864 Posibles mejoras para CWE:404
QAK-5038 QAK-4864 Posibles mejoras para CWE:459
QAK-5050 QAK-4864 Posibles mejoras para CWE:80
QAK-5051 QAK-4864 Nuevas reglas para CWE:81
QAK-5058 QAK-4864 Mejoras para OPT.JAVA.NullDereference
QAK-5208 Name rule OPT.VB6.VBCD.ACGE
QAK-5275 Implement CSRF protection in Java Spring for Java configuration
QAK-5415 Review TS support for TS 4
QAK-5672 New .NET rule (Subverting X509Certificate.Equals )
QAK-6127 Clean unused criteria
QAK-6280 QAK-6279 Remove groovy-rules jars from engine
QAK-6374 Improve "InsecureTransport" rules to check for ftp connections too
QAK-6380 Review VBNet unreachable checker
QAK-6435 PARSE error para fichero SQL
QAK-6508 Update Kotlin language level to 1.4
QAK-6514 QAK-5921 Review and merge changes in QAK.5921 branch into development
QAK-6516 False Propagation Path HttpRequestWrapper class
QAK-6517 Update Swift language level to 5.3
QAK-6518 Update Java language level to Java 15
QAK-6519 Update Python language level to 3.9
QAK-6524 Update C# language to 9
QAK-6525 Timeout Error While analyzing ReactJS files
QAK-6530 Unparse typescript/javascript file
QAK-6534 Control/flow graph building does not terminate in COBOL
QAK-6535 Parse errors in COBOL app
QAK-6539 Kiuwan Local Analyzer: "Timeout - killed the sub-process
QAK-6540 PARSE ERROR Cobol files
QAK-6542 Optimize Cobol's ConditionNeutralizationProcessor
QAK-6543 [LTA - 70.000$] FN in rule OPT.CPP.CERTC.ARR35 "iterate beyond the end of an array"
QAK-6546 QAK-6246 VBNet -> Datapath - Incorrect method call
QAK-6548 Include/Exclude patterns do not work well with projects where a (large) list of files to scan should be used instead
QAK-6551 QAK-6246 Kotin -> Datapath - Incorrect method call
QAK-6558 FP in OPT.JAVA.SEC_JAVA.ServerSideRequestForgeryRule and OPT.JAVA.SEC_JAVA.MailCommandInjection
QAK-6560 FP OPT.SWIFT.SECURITY.HardcodedUsernamePassword
QAK-6561 [Easirun] Parsing Error in .vb files
QAK-6562 Parse Error in .sql File
QAK-6563 Timeout Error While analyzing Java files
QAK-6564 Cobol parse errors
QAK-6566 [Telefonica] Possible FP in rule OPT.JAVA.SEC_JAVA.RegexInjectionRule
QAK-6567 QAK-6563 OPT.JAVA.SEC_JAVA.PotentialInfiniteLoop FPs
QAK-6568 QAK-6563 Disable OPT.JAVA.APackageDoesNotDependOnLessStablePackages from CQM
QAK-6569 C++ Rule for detecting suspect usages of std::forward
QAK-6570 Map C++ rules to the C++ Core Guidelines
QAK-6572 Wrong InjectionPoint in python
QAK-6576 QAK-6279 Remove groovy-rules jars from devwan
QAK-6577 java.lang.StackOverflowError OPT.JAVA.STR.CMPCH
QAK-6583 NPE IndirectTaintingSitesTask(csharp)
SAS-5438 heapdumps in local analyzer accumulate and fill the local filesystem
SAS-5439 Improve contents of the .diagnosis.txt files after an unrecoverable error during analysis in KLA
SAS-5481 Remove the groovy tech extensions from the LanguageInfo.properties file
SAS-5483 Cannot execute CPP analysis (KLA)

MT4

SAS-5239 BUG en endpoint DELETE /applications
SAS-5361 ERROR when pressing chrome back button in Kiuwan main page new user account
SAS-5488 Analysis with uploaded zip file does not work with new KLA

Other

SAS-4852 Insights - Support to add custom artifacts and vulnerabilities
SAS-5181 Use class attributes with user data in singleton beans
SAS-5399 Language combobox in the Add Custom Component window should not be editable
SAS-5401 Requires fields with blank spaces
SAS-5403 Label of the Is fixed version checkbox
SAS-5404 Performance in Mute Vulnerabilities tab
SAS-5405 Delete Affected Component is not working properly
SAS-5408 /insights/custom/component/list is not working properly
SAS-5409 Create custom component - group parameter
SAS-5411 NPE - Delete custom component
SAS-5412 Without wrong message - delete custom component
SAS-5415 NPE modifying licenses component
SAS-5424 Insights regression - Licenses without name
SAS-5429 No custom vulnerabilities taking account
SAS-5444 Redo the layout of mute vulnerabilities screen
SAS-5456 INSIGHTS: The vulnerabilities are not being updated correctly
SAS-5457 Wrong language adding custom component via API