johnperry/CTP

Security issue with HttpExportService to XNAT

Opened this issue · 1 comments

pfcgroot commented

It seems that the user credentials that are used to connect to xnat, are visible in the public web interface. (I.e., when visiting as guest.)

image

Thanks in advance for fixing.
Paul

johnperry commented

The issue is fixed. It is in the CTP-installer.jar in the repo's products directory. I'll put it on the RSNA MIRC site soon.