Contents

New Features

UI for user definition of neutralizers, sources, and sinks

This release includes a new Graphic User Interface (GUI) tool to allow customers to define and modify his custom metadata files. This tool should ease the process of the following actions:

• Finding the existing metadata files (both products and custom)
• Seeing the default product metadata
• Avoiding conflicts between different definitions (for all the system/for an application/for a given analysis). Only custom metadata is allowed to be edited - but it is possible to see all existing metadata.

The tool should help the configurator to see possible alternative definitions and values for each field, it includes some tooltips and examples.

Fixed Issues

MT9 changes

SAS-6460 Unable to view muted lines for developers no "mute defects" role
SAS-6313 Password recover page showing error when pressing enter
SAS-5812 New insight checkpoint based on vulnerabilities
SAS-5560 Feature Request for Action Plans and Jira
SAS-4955 Rules compare is not working as expected: missing modified rules
SAS-5373 Rules compare is not working as expected when new parameters in rule definition
SAS-5588 Propagate defects status between deliveries

Other changes

SAS-5685 Avoid too long computation time searching for all the childs
SAS-4896 Add action to Insight permissions to enable admin options in users management
SAS-5595 Improve delete portfolios time operation for large accounts
SAS-6288 OWASP Link in the rules are throwing 404 error
SAS-5882 Not working mutes in third-party languages (ruby) imported reports
SAS-6589 Avoid duplicate delivery promotions
SAS-6588 Error in insight list components rest endpoint
SAS-6581 NPE when creating a note for a defect with "None" status

SAS-6874 Quota limit REST-API passed too fast for accounts with low applications limit