[2021-06-16] Change Log – Kiuwan

ET5 (Kiuwan Engine)

QAK-5991 [New rule] Forms without captcha
QAK-6009 New security ASP.net rule (or XSS improve)
QAK-6080 Error from [org.codenarc.rule.size.AbcComplexityRule] java.lang.NoClassDefFoundError
QAK-6441 Preprocessing .dtsx files to parse as sql
QAK-6520 False positives validation Loop with Unreachable Exit Condition ('Infinite Loop')
QAK-6521 [FP] OPT.CPP.CERTC.EXP33
QAK-6528 False positive for OPT.ABAP.ADR.NamingConventions
QAK-6531 False positive OPT.JAVASCRIPT.ESTILO.NeverUseHistory
QAK-6536 False positive OPT.SWIFT.SECURITY.ThirdPartyKeyboardAllowed
QAK-6538 [FP] OPT.RPG4.REL.CallParameterMismatch
QAK-6550 [FP] OPT.JAVA.SEC_JAVA.ExecutionAfterRedirect
QAK-6552 ENHANCEMENT New rule PATH RELATIVE STYLE SHEET IMPORT
QAK-6554 False positive found during python code analysis
QAK-6557 [FP] OPT.CSHARP.MVCNonActionPublicMethods
QAK-6571 Inconsistent results of OPT.JAVA.SPRING.AvoidBeansWithTheSameIdAcrossDiferentDescriptors
QAK-6574 Update PHP language level to 8
QAK-6575 PARSE ERROR for file PL/SQL
QAK-6578 PARSE ERROR for PL/SQL files
QAK-6579 FP OPT.JAVA.ANDROID.UseASafeCipher
QAK-6587 Defects copied from one file to another in rule OPT.JSP.SEC_JSP.TargetBlankVulnerability
QAK-6588 Review suspicious code at OPT.JAVA.CONV.ObjectTypeVerification rule
QAK-6589 Allow empty values in parameter rule OPT.JSP.SEC_JSP.TargetBlankVulnerability
QAK-6590 [FP] OPT.CPP.CERTC.EXP33 using 'auto' keyword
QAK-6591 Parsing Error in .cs Files (Csharp Technology)
QAK-6592 False negatives for OPT.JAVA.SEC_JAVA.HardcodedUsernamePassword and OPT.PYTHON.SECURITY.HardcodedCryptoKey
QAK-6593 FP in typical example in rule OPT.HTML.SpecifyCharacterEncoding
QAK-6594 Kiuwan does not detect hardcoded passwords in XML
QAK-6595 Custom Neutralization not working for Java rule in latest release
QAK-6596 Parsing error C# in CSHTML files: MismatchedTokenException
QAK-6597 PARSE ERROR para 4GL files
QAK-6602 [FP] OPT.JAVASCRIPT.ESTILO.NeverUseHistory
QAK-6603 False positive in OPT.PYTHON.DJANGO.MissingBrowserXssFilter
QAK-6604 False positive OPT.VBNET.VBnet.RemoveUnusedLocals
QAK-6605 OPT.COBOL.SQL_COBOL.AvoidSelectAsterisk wrong defect code in copys
QAK-6606 False positive In rule OPT.CSHARP.ResourceLeakStream due to scope of disposal in C# v8
QAK-6609 False positive in OPT.JAVASCRIPT.TYPESCRIPT.UseTypeAnnotations rule
QAK-6612 False positive OPT.JAVA.SEC_JAVA.XmlEntityInjectionRule
QAK-6613 False positive OPT.JAVA.SEC_JAVA.FormatStringInjectionRule
QAK-6615 False positive in OPT.JAVA.SEC_JAVA.HttpSplittingRule
QAK-6617 False positive OPT.JAVASCRIPT.ERRORCOMUN.UnusedLocalVar
QAK-6619 Parse error in COBOL Tandem source
QAK-6620 False positive OPT.JAVA.CNU.UI
QAK-6621 False positive OPT.JAVASCRIPT.SensitiveInfoInConfigurationFile
QAK-6622 False positive detecting XSS in Java types
QAK-6623 PARSE ERROR for file ASP.NET VB.NET
QAK-6626 ERROR while analyzing CS file with SQL query
QAK-6629 StackOverflowError while doing analysis of Swift Technology
QAK-6630 Possible false positive in rule OPT.CSHARP.NullDereference
QAK-6631 COBOL parse error in XML GENERATE statement
QAK-6639 RPG parse error due to left margin and ? character at indicator column (column 6)
SAS-5442 Kiuwan support for Expression Language Injection with Thymeleaf & Spring
SAS-5543 java.lang.NoSuchMethodError Executing clone detection

MT5 (Kiuwan general bug fixing)

SAS-5320 ENHANCEMENT insights report
SAS-5357 Cannot create username if similar username existed
SAS-5397 ENHANCEMENT encoded HTTP auth when indicating username of lDP in agent.properties file
SAS-5478 Compare of different Models is not matching correctly
SAS-5479 Set "Effort=0" in a rule makes report processing to fail
SAS-5499 Last part of email in update user in REST-API can only be lowercase
SAS-5525 Normative Filter is not working sometimes for defects in Life Cycle

MT6 (Kiuwan general bug fixing)

SAS-5349 Security / Analysis / Insights links are not working properly
SAS-5355 ERROR in exclude.patterns and supported.technologies Jenkins Plugin not updated
SAS-5369 ERROR readlink illegal option --f in rdev.sh MacOS Catalina
SAS-5425 ERROR in URL audit fail checkpoint detail
SAS-5426 Mismatch in Lines of Code
SAS-5458 User cannot create a new portfolio
SAS-5489 KLA Copy-paste options don't properly work in MacOS
SAS-5494 ERROR while promoting delivery to baseline java.lang.NullPointerException
SAS-5496 NPE viewing checkpoint detail with user custom rules
SAS-5501 Error generating insight security csv report
SAS-5506 INSIGHTS Obsolescense wrong date in component org.ow2.asm:asm version 8.0.1
SAS-5530 INSIGHTS Obsolescense wrong date in component org.ow2.asm:asm
SAS-5549 BUG prefijos de normativas no listados causan que no se muestren al exportar a csv
SAS-5571 NPEs when calculating customerID for jobs in queue
SAS-5578 Error updating artifacts in KOP insights batch

Oauth2/OIDC Integration

SAS-5449 OAuth SSO project
SAS-5467 Refactor SAML Dependencies out of main flows
SAS-5468 Create Oauth2 configuration model
SAS-5469 Create Oauth configuration GUI and integrate model
SAS-5470 Configure SPRING SECURITY to handle Oauth2 login
SAS-5523 Change password screen appeared for SSO logged in user into application
SAS-5531 Unable to log in with SSO=on on ADFS AD server 16
SAS-5532 Reconfiguring/updating SSO configuration on Successfully activated SSO is throwing error "incorrect result size"
SAS-5545 Unable to Update the values for OAuth-OpenID SSO configuration
SAS-5568 OIDC redirect_uri protocol does not match with the configured one in Azure
SAS-5569 OAuth SSO settings are not saved in KLA
SAS-5575 NoClassDefFoundError when launching KLA after Oauth and MT5 integration
SAS-5577 User deletion fails
SAS-5579 OIDC with KLA does not complete
SAS-5581 Intermittent error in KLA with OIDC