Penetration test results - webpack:// information leakage

Products

• CA Identity Suite
• CA Identity Manager

Issue/Introduction

 

Information Leakage – 

-              Webpack files can be inspected in Chrome’s Dev Tools

-              Open Chrome’s DevTools (Option+CMD+J for Mac or Shift+Ctrl+J for Windows/Linux)

-              Navigate to the “Sources” tab

-              Select the “Page” tab in the left-hand column

-              Scroll down to “webpack://” and expand

 

Environment

Release : 14.3 CP2

Component : CA IDENTITY SUITE (VIRTUAL APPLIANCE)

Resolution

Please open a case with L1 support and reference the following for the 14.3 CP2 patches.

HF-IM-DE521461-20211124-0001.tgz.gpg

HF-IP-DE521461-20211124-001.tgz.gpg