Skip to Main Content
Spotfire Ideas Portal
Status Future Consideration
Categories access control
Created by Guest
Created on Aug 21, 2018

Method to Restict Client Driver Minimum Version

Since many early versions of the client drivers are harmful to the CIS/TDV servers, it would be nice to enforce a minimum client version to prevent DoS attacks.  I had discovered and documented how a misconfigured csjdbc.jar driver can cause a denial of service attack on the server by simply having an incorrect keystore password configured.  This was true for csjdbc.jar files versions 7.0.0 through 7.0.4 and was only corrected in csjdbc.jar 7.0.4.00.04.

If the server could prevent old clients from connecting (instead of harming the server) then this would help identify applications using old drivers.

  • Attach files