The following issue was raised following a penetration test -
Description
The Web Services Definition Language (WSDL) file was accessible and other messages returned information that could possibly be used to penetrate a system. This is happening under Eclipse plugin with element actions.
Environment
Release : 18.0
Component : ENDEVOR ECLIPSE PLUGIN
Cause
Eclipse plugin element actions are using SOAP requests
Resolution
Element SOAP requests were modified to use RESTful client for the Eclipse plugin. apply PTF #SO09627