Host site information available in error messages

Products

• Endevor
• Endevor Natural Integration
• Endevor - ECLIPSE Plugin
• Endevor - Enterprise Workbench

Issue/Introduction

The following issue was raised following a penetration test - Description The Web Services Definition Language (WSDL) file was accessible and other messages returned information that could possibly be used to penetrate a system. This is happening under Eclipse plugin with element actions.  

Environment

Release : 18.0 

Component : ENDEVOR ECLIPSE PLUGIN 

Cause

Eclipse plugin element actions are using SOAP requests

Resolution

Element SOAP requests were modified to use RESTful client for the Eclipse plugin. apply PTF  #SO09627