web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Microsoft Dynamics NAV (Archived) / NAV 2018 Web Client Vu...
Microsoft Dynamics NAV (Archived)

NAV 2018 Web Client Vulnerabilities

(0) ShareShare
ReportReport
Posted on by Angelos Kontos 7

Hi Team,

One of our customers has executed a vulnerability analysis against the NAV 2018 web client.

The tool reported the following vulnerabilities, so it's on us now to provide clarifications.

1. Slow HTTP POST vulnerability on the main URL (https://domainname.com/nav_web

2. Cookie Does Not Contain The "secure" Attribute (domainname.com/.../SignIn)

We appreciate your feedback on the above matters.

Best Regards,

Angelos 

*This post is locked for comments

I have the same question (0)
  • Suggested answer
    Stefano Demiliani Profile Picture
    Stefano Demiliani 37,166 Most Valuable Professional on at

    Just my opinion:

    1) Not true. to prevent Slow HTTP Post vulnerabily NAV server has an option to set a request timeout as per your needs.

    2) Cookie Does Not Contain The "secure" Attribute: NAV 2018 is stateless, doesn't use cookies and uses Windows Authentication. However, this could be a "problem" if you use HTTP over internet. But you can use HTTPS if you want more security over the internet (recommended).

  • Angelos Kontos Profile Picture
    Angelos Kontos 7 on at

    Thanks Stefano for the prompt response.

    For 1 this is what i was thinking as well.

    For 2 however I had no idea. We always use HTTPS in any case.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Congratulations to the November Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics NAV (Archived)

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans