漏洞
Portal for ArcGIS REST API successfully generates tokens where the maximum expiration time requested is greater than actual expiration.
| 漏洞 ID 编号 | BUG-000106724 |
|---|---|
| 已提交 | July 20, 2017 |
| 上次修改时间 | February 13, 2025 |
| 适用范围 | Portal for ArcGIS |
| 找到的版本 | 10.5.1 |
| 操作系统 | Windows OS |
| 操作系统版本 | 2012 R2 |
| 状态 | Will Not Be Addressed |
附加信息
This is an expected behavior. The maximum length of time a token can be generated for is defined with the 'maxTokenExpirationMinutes' under /sharing/rest/portals/self. The maximum value that can be set is 20160 minutes (2 weeks). If a generate token request is made with a value greater than this maximum, the token is created but with an expiration that matches this maximum.重现步骤
漏洞 ID: BUG-000106724
软件:
- Portal for ArcGIS
当漏洞状态发生变化时获得通知
发现关于本主题的更多内容
搜索相关信息
查找与此主题相关的培训
探索想法并提供反馈
获取来自 ArcGIS 专家的帮助
下载 Esri 支持应用程序