Discussions tagged Security
Is there any way to secure a pbl so that only certain users can access it? We are looking at the possibility of creating an Infomaker report that contains FERPA data. Since it contains FERPA data, we want to limit the users that can see the report....
Buenas dios,
Tengo una aplicación PowerBuilder cliente servidor. Actualmente en los equipos se instala la aplicación y una software VPN como ser Forticlient o OpenVPN.
Esta misma aplicación la migre a la versión Cloud, en un servidor se instálalo...
Dear Appeon:
There is another security issue to ask your advice, Is there any way for Powerbuiilder to prevent code injection by marking memory regions as non-executable? as we known ASLR, DEP, and SafeSEH are considered best practices for all devel...
Hello everyone!Do you know if it still makes sense (PB 2022 R3) to apply this security when our C/S app runs on Windows 10/11?I have never used it and I want to see in which case I would use it.
I would like to know if this configuration has a signi...
Hi team,
Powerserver deployed application undergone for VA/PT process and observed that SSL pinning to be enabled in application, how we can do this? any guide help us
Below is the observation
Vulnerability: Application is vulnerable to MITM Attac...
Short of writing a custom interface, can anyone suggest an alternative to the PB standard functions GetFileOpenName() and GetFileSaveName()? We are wanting to let users select a file for open or save, but restrict their ability to change the folder b...
Hi Everyone,
What can be done to avoid DLL hijacking for a Powerbuilder application in a Windows environment.
Files may be signed using Microsoft sign tool but this will not protect from hijacking unless you somehow use verify to check the
files ...
Hi PB users,
With the new Security Bulletin: Apache Log4j2 Remote Code Execution Vulnerability (CVE-2021-44228) we start to answer our customers that they are not affected by our applications because we only use classic Powerbuilder branch and we do...
Hi PowerBuilder community,
Currently, all PowerBuilder runtime DLL files have been signed, which is great.
Part of the PowerBuilder runtime (for PowerBuilder 2019 R3) is pbdwr.pbd.That file isn't signed as far as I can tell. Perhaps it cannot be si...
Hello fellows, Are there tools to provide code protection, obfuscation and software system licensing for applications genertated in Powerbuilder (powerscript)?. Thanks....
We are currently using Infomaker 2019. We have some forms that were created with Infomaker. We are adding some fields to one of these forms. However, the fields we are adding have some confidential information. As a result, we want the user to ve...
Are there any samples or guidance for securing a ASP.NET Core 3.1 Web API as templated by SnapDevelop?
For example, I am working from the following fine sample:
ASP.NET Core 3.1 - Simple API for Authentication, Registration and User Management | ...
Hi All!
How sign a xml file with a certificate x.509?
Here we use many many xml files to exchange information between companies and we need sign with certificate x.509 (A1, A3...) these files to guarantee the security...
Is there a resource in PB ...
Hi all,
One of my apps uses the PFC security app to set up users, groups and access to windows, etc (I know old school right). I only use it to prevent certain users from seeing [admin] options on the menu and being able to click on them to open win...
We've just had a security review and one thing that has been highlighted as important is that the PDFs generated by Powerbuilder PDFLib contain metadata.. which in of itself is okay, but one of the elements is the name of the windows user who created...
Hello All,
We have our applications on Powerbuilder 2019. Due to third party requirement, we need to scan our code for vulnerabilities using any 'Source code Analysis tools' and generate report. I didn't find any tool for PB scripts.
Can anyone kin...
We have number of applications in Power Builder 10.x and 12.x with SQL server as back end database using ODBC connections. These are built using Power builder Classic. I know PB 10.x/12.x is not supported anymore. I need an advice from experts on wha...
Can someone please provide guidance on how to configure a database connection to use SSL to a Sybase ASE database? I need to know how to connect from both the Powerbuilder IDE and, separately, from a client/server application.
We are currently usin...
Hello,
I'm trying to understand security for a PowerServer deployment when used to deploy a traditional Powerbuilder (classic) application.
Is there good documentation that I could read, and could be shown to security architects?
In particular, I'...
Hi everyone, currently I'm using PowerBuilder 2017 connected to Oracle 19C. During some audit test of my app I received some notifications about my tool.
When I have SQL scripts embedded in my code, if I run the tool and test the memory, those scrip...
- Page :
- 1