Release Notes on Documentation - V2

Current known issues and vulnerabilities

Mon, 01 Jan 0001 00:00:00 +0000

Current known vulnerabilities

CAST takes security seriously, as such this section provides detailed information about all known security vulnerabilities that are present in AIP Core. If you think you may have found a vulnerability that is not listed in this page, please contact us.

Vulnerability reference	Currently impacted CAST AIP software/versions	Fixed in	Description/Notes
CVE-2014-0160	Zorba 1.4	Not fixed	There is currently no standalone patch available for Heartbleed vulnerable DLLs present in the third-party Zorba 1.4.

Current known issues

This section lists all current known issues in AIP Core. There are 32issues in the list.

Assessment Model updates

Mon, 01 Jan 0001 00:00:00 +0000

Info

Summary: This pages lists the changes made to the “core” AIP Assessment Model between successive releases.

AIP 8.3.54 - 8.3.55

No changes.

AIP 8.3.53 - 8.3.54

This section lists the results of acomparison between aCAST AIP 8.3.53Assessment Model and a CAST AIP 8.3.54 Assessment Model. You can download the original compare_8353_8354.xlsx file (which you should open in Microsoft Excel) if you prefer.

Click here to view the results…

Shipped extensions

Mon, 01 Jan 0001 00:00:00 +0000

Info

The following official CAST AIP extensions are shipped with each release of AIP Core.

≥ 8.3.48

Click here to expand…

To reduce the overall size of the AIP Core distribution, the “shipped_extensions” folder does not contain any extensions. The following extensions were removed in 8.3.48:

Extension name	Version	Notes
JEE Analyzer	1.0.29	Removed in 8.3.48
Web Services Linker	1.7.11
CAST AIP Internal Extension	0.9.11

8.3.47

Click here to expand…

General notices

Mon, 01 Jan 0001 00:00:00 +0000

Action Plan Optimizer

Please also note the following about the Action Plan Optimizer tool available in AIP Core:

This tool is currently in beta.
The simulated grade may be lower than the actual grade. This means that the optimization algorithm is not able to find an appropriate solution to the objective that has been set.

Use of Anti-Virus software

Before launching the AIP Core setup, please make sure that you disable your Anti-Virus software. Once the setup has completed, remember to enable it again.
Some anti-virus software applications may interfere with Java processes that CAST AIP requires. If you find that you are having trouble using the CAST Delivery Manager Tool, or generating a snapshot (for example) you may wish to exclude the following items from real-time protection:
- java.exe
- javaw.exe

Long path support

When using CAST AIP, the path of some log files and other internal files may exceed the total number of characters permitted for a path in Microsoft Windows (260 characters by default - see https://docs.microsoft.com/en-us/windows/win32/fileio/naming-a-file#enable-long-paths-in-windows-10-version-1607-and-later for more information). This is especially true when enabling the User Input Security feature for .NET and JEE technologies. When a path exceeds 260 characters, the analysis (or feature) would usually crash, for example the User Input Security would crash with the errors “System.IO.PathTooLongException” or “System.InvalidOperationException”.

Limitations

Mon, 01 Jan 0001 00:00:00 +0000

Link bookmarks

Bookmarks for links between objects (i.e. indicating the code that generates the link between the two objects) will only be saved to the Analysis schema (local) when the link code is located within a bookmark of the calling object.