Important Update: Cohesity Products Knowledge Base Articles


All Cohesity Knowledge Base Articles are now managed via the Cohesity Support Portal: https://support.cohesity.com/. The Knowledge Base articles available here will not reflect the latest information or may no longer be accessible.

NetBackup IT Analytics - Custom reports (RTD) are not displaying the HTML tags properly

Article: 100056335
Last Published: 2023-06-01
Ratings: 0 0
Product(s): NetBackup IT Analytics, NetBackup

Problem

Custom report using Reporting Template Designer (RTD) does not display the HTML tags.
 

Error Message

N/A
 

Cause

A Cross-Site Scripting (XSS) fix made in Aptare 10.6 P9.
 

Solution

1) Add the flag portal.allowHtmlTagsInRTD=true in the portal.properties file. 

2) Stop and start Tomcat Portal service.

Linux:
1) Make a backup and edit:
/opt/aptare/portalconf/portal.properties

2) Add the flag and save the file:
portal.allowHtmlTagsInRTD=true

3) Restart APTARE Portal Tomcat service:
# /opt/aptare/bin/tomcat-portal stop
# /opt/aptare/bin/tomcat-portal status
# /opt/aptare/bin/tomcat-portal start


Windows:
1) Make a backup and edit:
C:\opt\aptare\portalconf\portal.properties

2) Add the flag and save the file:
portal.allowHtmlTagsInRTD=true

3) Restart APTARE Portal Tomcat service from Windows Services.
 

Note: If this flag is set, customer can potentially be exposed to XSS vulnerability through custom RTD.

There are currently no plans to address this issue by way of a patch or hotfix in the current or previous versions of the software at the present time. While this issue may be resolved in a future major revision of the software at a later time, it is not currently scheduled for any release.  If you feel this issue has a direct business impact for you and your continued use of the product, please contact your Veritas Sales representative or the Veritas Sales group to discuss these concerns.
 

References

JIRA : SC-40582 JIRA : SC-40585

Was this content helpful?