Quantum Fabric Installer Hotfix 9.7.1.3 (On-Premises)

Enhancements

  • To avoid Session Fixation attacks, the JSESSIONID regenerates every time a user loads the login page.
  • To avoid privilege escalation, client details are now bound to the session. Therefore, the JSESSIONID of one user cannot be used by other users.

Fixed Issues

  • Fixed an issue where active user sessions were not invalidated after changing the user password.
  • Fixed an issue where user input was not validated appropriately.
  • Upgraded the following components to fix vulnerability issues:
    • AngularJS
    • JQueryUI
    • CodeMirror
    • JQuery Migrate