Inputting invalid URL parameters may expose internal error messages

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.1 EE SP4 (5.1.7), 5.2 EE SP1 (5.2.5)
• Fix Version/s: 5.1 EE SP5 (5.1.8), 5.2 EE SP2 (5.2.6)
• Component/s: Application Security
• Labels:
  • 5.2_release_notes
• Environment: All

Inputting invalid URL parameters may expose internal error messages to the public. Specifically, modifying the parameters p_p_state or p_p_mode will cause the portal to respond with a HTTP 500 error. To address this issue, a HTTP 400 error is now returned to minimize the amount of revealed information.