Enabling "Include Sql Curve Data" (Beta Functionality) exposes unexpected information in logs
book
Article ID: 406086
calendar_today
Updated On:
Products
Clarity PPM SaaSClarity FedRAMPClarity PPM On Premise
Issue/Introduction
Steps to Reproduce:
Login to Clarity as administrator privileges
Navigate to Administration --> System Options --> Section Data warehouse Options
Check Include Sql Curve Data (Beta)
Expected Results: No unexpected information should be exposed in logs
Actual Results: Unexpected information is exposed in logs accessible to administrators who've been granted access to view logs.
Environment
Clarity 16.3.0, 16.3.1, 16.3.2
Cause
DE174051
Resolution
Broadcom will generate a fix that can be deployed to address the issue.
The fix will be deployed for all Broadcom SaaS customer's on GCP as part of the August Monthly Maintenance scheduled for August 8th 2025.
Broadcom will work with Rego to deploy the fix for impacted customers in AWS infrastructure.
OnPremise customer on impacted version contact Broadcom support to obtain a fix. In addition, till a fix is deployed on the customer environment we recommend customers disable "Include Sql Curve Data" by following the steps listed below:
Login to Clarity
Navigate to Classic UI Administration -> System Options --> Section Data warehouse Options
Disable "Include Sql Curve Data"
Customer can contact Broadcom support for any further details or to obtain steps to remove the option to enable "Include Sql Curve Data"