Page Comparison

...

No.

Issues

Solution

1

Portal UI doesn’t go up and so you cannot access SDC UI via Portal UI

Go to https://<<sdc_ip>>:<<sdc_port>/ with Google Chrome Dev
Open Inspect and go to Application section
On left column, open Cookies
Add the following cookie key/value
USER_ID cs0008 for designer role
USER_ID demo for admin role

This hack can be possible since SDC UI authentication mode is cookie based. So the attacker can override the cookie to force its request.

'Create new Service' from SDC UI
[empty field form]

The WA is described here:

Jira Legacy

Versions Compared