admin/raven
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Security review: finding IDs are permanent

Browse Source 
Cases will refer to finding numbers, so they are never renumbered or reused.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
John Cardinal
2026-10-24 06:00:25 -07:00
parent 8a54c020c5
commit ba60825167
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
devdocs/modernization/SECURITY-REVIEW.md
View File

@@ -184,6 +184,9 @@ customer reaching another's data; or serious abuse of the company's resources)
Status: *candidate* (seen in code, not yet confirmed), *confirmed*, *fixed in case NNNN*,
*accepted*.
**Finding IDs are permanent:** never renumber or reuse them; John's cases refer to them. New findings
take the next free number; a fixed or accepted finding keeps its ID and changes status.
| ID | Severity | Status | Title |
|---|---|---|---|
| F41 | **Critical** | confirmed (code) | F5 also in Sockeye (internet-facing admin login) and in the 8.2.x business AyaNova server |