Project

General

Profile

Actions

Idea #2661

closed

Security audit

Added by Tim Pierce about 10 years ago. Updated about 7 years ago.

Status:
Closed
Priority:
Normal
Assigned To:
-
Category:
-
Target version:
-
Start date:
Due date:
Story points:
-
Actions #1

Updated by Tim Pierce about 10 years ago

  • Tracker changed from Bug to Idea

Adding this story as a placeholder for performing a general security audit on Arvados infrastructure.

Some items that we want to prove and document we have covered, an incomplete list (please add to this)
  • URL path traversal attacks, e.g. GET /somevalidhash+size/../../../../etc/passwd
Actions #2

Updated by Tom Clegg almost 10 years ago

  • Target version set to Arvados Future Sprints
Actions #3

Updated by Tom Clegg about 7 years ago

  • Status changed from New to Closed
Actions #4

Updated by Tom Clegg about 7 years ago

  • Target version deleted (Arvados Future Sprints)
Actions

Also available in: Atom PDF