Release 4.16.0 - 25-05-2023

Features

• [DRA-1076] - Enable filters on the component's table.
• [DRA-1096] - Associate icons to components.
• [MSR-1046] - Include UUID in the Security Classification table and entity.
• [MSR-896] - Modify provided countermeasures standards list through the API.
• [MSR-1054] - Audit entity tables should use UUID as the primary key.
• [OPT-778] - Terraform plan Core Endpoint.
• [DRA-621] - Message when the Licence limit is reached when creating a project.
• [RT-777] - New filters and improvements for threats and countermeasures.

Bug Fixes

• [ARCH-549] - Fixed an error starting the app when DB is configured with password encryption set to SHA-256.
• [DRA-1008] - Fixed POST product (create) endpoint returns wrong attribute types.
• [DRA-1102] - Fixed an unexpected error when opening a project.
• [INR-723] - Fixed the widget Version Landing Page.
• [MSR-579] - Users with 'library_view' permission are able to apply a library to projects.
• [MSR-1063] - Security Classification API v2 - Fixed an error trying to delete a non-existing object.
• [MSR-1083] - Security Classification API v2 - Fixed an error when updating a reference with an existing value.
• [MSR-1084] - Security Classification API v2 - Fixed an error when creating an existing reference value.
• [MSR-1111] - Fixed an error for ThreatDto when syncing a project.
• [MSR-1114] - Fixed an error creating a main rule with the action 'Generate Report' and the type 'Compliance Report'.

Security Fixes

• [MSR-1073] - Internal integration security fix.

API Changes

• API Release Notes 1.23.0

New Knowledge-base Content

Cloud components:

• [CON-1468 & CON-1472]: New SAP components:

  • SAP HANA

  • SAP S/4 HANA

  • SAP Hana Cloud

  • SAP ABAP

  • SAP GUI

  • SAP DATA

  • SAP FIORI

  • SAP NetWeaver

• [CON-1565]: New Azure component:

  • Azure Application Insights

Content Updates:

• [CON-1569]: Added new, improved descriptions to every default component

• [CON-1571, CON-1576 & CON-1579]: New questions to reduce threat model output for the following functional components:

  • Access Token

  • File Chooser

  • Login

  • Change Password

  • API Endpoint

• [CON-1556]: Rephrased SPOOF-ENDPOINT threat description