Top "Fortify" questions

Fortify, the software application security products and services from Micro Focus.

How does Fortify software work?

Fortify is a SCA used to find the security vulnerabilities in software code. I was just curious about how this …

fortify
How to fix "Path Manipulation Vulnerability" in some Java Code?

The below simple java code getting Fortify Path Manipulation error. Please help me to resolve this. I am struggling from …

security fortify path-manipulation
Fortify command line usage

Has anyone used command line to run fortify? I tryin to incorporate fortify run in my CI build and I …

c# security command-line configuration fortify
log forging fortify fix

I am using Fortify SCA to find the security issues in my application (as a university homework). I have encountered …

java security logging fortify log-forging
Can't resolve Log Forging Fortify issue

I am having trouble fixing a Log Forging issue in Fortify. The issue, "writes unvalidated user input to the log", …

java fortify log-forging
Fortify integration with Maven - install

I want to run a Fortify scan against a Maven Eclipse project. Where should I start? I understand that I …

java eclipse maven fortify fortify-source
Access Control: Database Fortify

We ran the Fortify scan and had some Access Control: Database issues. The code is getting the textbox value and …

fortify
What is the solution for Mass Assignment: Insecure Binder Configuration Vulnerability?

I have this Controller in Java: @Controller public class AuthenticationController extends AbstractController { @RequestMapping(value = Constantes.MAPPING_AUTH_BASE_ASP, method = { …

java fortify
ESAPI for XSS prevention not working

I am working on fixing Cross site scripting issues in our code mainly in JSPS. Below is the original code //…

java xss fortify cross-site esapi
How to validate an object before deserializing

In my code, I am calling getObject() method from an ObjectMessage object received from a JMS queue. Fortify report is …

java validation serialization deserialization fortify