1.28

Mon, 01 Jan 0001 00:00:00 +0000

Content matrix

Version	Summary of content	Comments
1.28.9-funcrel	Bug fixes	Can be used with: ≥ 8.3.3
1.28.8-funcrel	Bug fix to resolve issue with login for non admin users in 1.28.6 and 1.28.7 Bug fix to resolve two CVE vulnerabilities found in CAST Dashboards, for CVE-2022-23457. Refer: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23457
1.28.7-funcrel	Bug fix to resolve CVE vulnerabilities found in CAST Dashboards, for CVE-2022-22965 and CVE-2022-21724 for OWASP
1.28.6-funcrel	Bug fix to resolve issue with user authorization
1.28.5-funcrel	Bug fix to resolve CVE vulnerabilities found in CAST Dashboards, for Apache Log4j: CVE-2021-45105 and CVE-2021-44832
1.28.4-funcrel	Bug fix to resolve two CVE vulnerabilities found in CAST Dashboards, for Apache Log4j: CVE-2021-44228 and CVE-2021-45046.
1.28.3-funcrel	Bug fixes
1.28.2-funcrel	Bug fixes
1.28.1-funcrel	Bug fixes
1.28.0-funcrel	Bug fixes

1.28.9-funcrel

Resolved Issues

Customer Ticket Id	Details
36807	Error running Datamart process - Encountered error while running Datamart.
36651	SAML authentication is not working in recent version of Dashboard.

1.28.8-funcrel

Resolved Issues

Customer Ticket Id	Details
35627	Security Dashboard login for non admin users is not working in 1.28.6 and 1.28.7
36321	All rules of an application are not extracted.

1.28.7-funcrel

Other Updates

Internal Id	Details
DASHBOARDS-4518	A fixed has been applied to all Dashboards/RestAPI to close the vulnerability, also known as Spring4Shell, described in CVE-2022-22965. See: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22965 and https://doc.castsoftware.com/display/CAST/Spring+Framework+-+CVE+vulnerabilities.
DASHBOARDS-4515	A fix has been applied to all Dashboards/RestAPI all Dashboards/RestAPI (upgrade of embedded PostgreSQL driver 42.2.18 to 43.3.3) to close the vulnerability described in CVE-2022-21724. See: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21724.

Resolved Issues

Customer Ticket Id	Details
35030	Fixed a nullpointerException popup that appeared erroneously when logging in to the dashboard.

1.28.6-funcrel

Resolved Issues

Customer Ticket Id	Details
34067	Issue with user authorization in Security Dashboard.

1.28.5-funcrel

Other Updates

Internal Id	Details
DASHBOARDS-1764	Impacted transaction section is not loading for some transactions.
DASHBOARDS-4264	Update Log4j version to 2.17.0 for 1.x and 2.4.4 branch for CVE-2021-45105. Refer: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45105 and https://doc.castsoftware.com/display/CAST/Apache+Log4j+-+CVE+vulnerabilities (CAST documentation).
DASHBOARDS-4306	Update Log4j version to 2.17.1 for 1.x branch.

Resolved Issues

Customer Ticket Id	Details
33265	Fixed an issue where “Advanced search” is not working when transactions are filtered based on health factor.

1.28.4-funcrel

Other Updates

Internal Id	Details
DASHBOARDS-4238	Upgrade Log4j to v 2.16 to resolve CVE-2021-44228 and CVE-2021-45046. Refer: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228, https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45046 and https://doc.castsoftware.com/display/CAST/Apache+Log4j+-+CVE-2021-44228 (CAST documentation).

1.28.3-funcrel

Resolved Issues

Customer Ticket Id	Details
33202	Error while running data mart.

1.28.2-funcrel

Other Updates

Internal Id	Details
DASHBOARDS-4096	Adjustment factor’s detail values are rounded incorrectly.

1.28.1-funcrel

Other Updates

Internal Id	Details
DASHBOARDS-3909	DATAMART: Fix USR_EXCLUSIONS extraction.
DASHBOARDS-3908	DATAMART: Optimize app-findings-measures extraction.
DASHBOARDS-3884	Console errors with Advanced search selection tables sorting.

1.28.0-funcrel

Other Updates

Internal Id	Details
DASHBOARDS-3304	Comment list is not filtered based on ‘Security’.
DASHBOARDS-3728	SD user admin page is showing wrong tab icon.
DASHBOARDS-3685	Sorting in react tables not working when the strings are mixed with lower and upper case.

Resolved Issues

Customer Ticket Id	Details
30998	Violations not appearing in Advance search page in Security Dashboard.
30903	Data is not displaying in the report section of dashboard at first time of report type selection.
28825	Out of Date Plugins in Security Dashboard.

AJS.$('[data-macro-name="markdown-from-url"] code').each(function(i, block) { hljs.highlightBlock(block); });``AJS.$('[data-macro-name="markdown-from-url"] .language-mermaid').each(function(i, block) { const config = { startOnLoad:true, theme: 'default', flowchart:{ useMaxWidth:false, htmlLabels:true } }; mermaid.initialize(config); window.mermaid.init(undefined, block); });

2.11

Mon, 01 Jan 0001 00:00:00 +0000

Content matrix

Version

Summary of content

Comments

2.11.7-funcrel

Updates:

Internal bug fixes

Can be used with:

≥ 8.3.3

2.11.6-funcrel

Updates:

Customer bug fixes

2.11.5-funcrel

Updates:

Customer bug fixes

2.11.4-funcrel

Updates:

Customer bug fixes

2.11.3-funcrel

Updates:

Improvements for Action Plan Recommendation feature.

2.11.2-funcrel

Updates:

Minor bug fixing in the Admin Center.
Customer bug fixes

2.11.1-funcrel

Updates:

Bookmarks have been added to the left side of Security Compliance PDF reports
Changes made to support deployment of CAST Dashboards with Java 17 (LTS).
Customer bug fixes

2.11.0-funcrel

Updates:

Release Notes - CAST Security for AIP

Mon, 01 Jan 0001 00:00:00 +0000

On this page:

Version: 8.3.7

Info

Note that this release is based on CAST AIP 8.3.7.

Updates

Internal ID	Description	Documentation
SEC-3	Add a OWASP Tile in the Security Dashboard	See Using the CAST Security Dashboard.
SEC-7	Add a CWE Tile
SEC-8	CISQ - Add a CISQ Security Tile in Security Dashboard
SEC-163	Mis Configurations - Add a Mis Configuration Tile in Security Dashboard
SEC-162	Implement additional Tiles in Security Dashboard - OWASP CISQ CWE Misconfiguration GDPR

Resolved issues

Internal ID	Call ID	Description
SEC-160	-	Security rules parentship inconsistencies: User should be able to filter CISQ violations count based on Health factor
SEC-178	-	User should be able to filter quality-standard-violations count by critical and non-critical using the RestAPI.
SEC-198		No option to launch SED in CAIP for security CAST-MS

Version: 1.0 - 08 May 2018

Info

Note that this release is based on CAST AIP 8.3.3.

CAST Security Dashboard on Documentation - V2

1.28

Content matrix

1.28.9-funcrel

Resolved Issues

1.28.8-funcrel

Resolved Issues

1.28.7-funcrel

Other Updates

Resolved Issues

1.28.6-funcrel

Resolved Issues

1.28.5-funcrel

Other Updates

Resolved Issues

1.28.4-funcrel

Other Updates

1.28.3-funcrel

Resolved Issues

1.28.2-funcrel

Other Updates

1.28.1-funcrel

Other Updates

1.28.0-funcrel

Other Updates

Resolved Issues

2.11

Content matrix

Release Notes - CAST Security for AIP

Version: 8.3.7

Updates

Resolved issues

Version: 1.0 - 08 May 2018