| Subject: | Security Concerns on User Login Barcode Scan |
| Summary: | LinkSOFT Version: V16.03 Section C. The issue can be reproduced by performing the following steps: - Scan User Login Barcode on POS Barcode Scan Field
- The message shows the Users Username and password in Plain Text
Next Step: - Need some sort of encryption on Login Barcode Report or consider implementing QR Code.
|
| Audit Notes: | Edited by sanjay on 27/07/26 15:11. Edited by sanjay on 27/07/26 15:00. Edited by sanjay on 27/07/26 14:52. Edited by sanjeet on 24/07/26 13:56. |
| 24 Jul 2026 | 11:17AM Comment 1 by Sanjay (Link Technologies) Assigned To: Sanjay (Link Technologies) Followup Date: 24-07-2026 05:16 PM Time Taken: 1.00 Notes: ETC extended from: 23/07/2026 to 24/07/2026 |
| Morning Sanjeet, I will have a look at this shortly. The case says V16.63. Is this correct? Also can you update the case with which environment you reproduced this in? Was it standard Demo or Clients? |
|
| 24 Jul 2026 | 01:56PM Comment 2 by Sanjeet (Link Business Solutions) Assigned To: Sanjay (Link Technologies) Followup Date: 24-07-2026 07:56 PM Time Taken: 5.00 |
| Version is 16.03 Standard Demo |
|
| 27 Jul 2026 | 02:52PM Comment 3 by Sanjay (Link Technologies) ETC was changed from 24/07/2026 to 31/07/2026 |
| 27 Jul 2026 | 03:00PM Comment 4 by Sanjay (Link Technologies) Assigned To: Sanjay (Link Technologies) Followup Date: 27-07-2026 08:52 PM Time Taken: 6.00 |
| Hi Sanjeet, I have made the following changes to this case: - Added case to the V16.04 project
- Changed from Software Defect to Enhancement. See definition on helpdesk policy
- Reduced priority as this problem with be for all Barcode/QR code scanners. If you scan on Notepad, or any other text viewer, you will get the same result. Therefore, the only option is for us to encrupt the security code so the value the user sees is not the actual password.
Note the following design changes will be implemented: - We will implement symmetrical encryption on the passcode scanning
|
|
| 27 Jul 2026 | 03:00PM Comment 5 by Sanjay (Link Technologies) Case L13270 added to project 16.04 |
| 03 Aug 2026 | 01:55PM Comment 6 by Sanjay (Link Technologies) Assigned To: Sanjay (Link Technologies) Followup Date: 28-08-2026 01:54 PM Notes: ETC extended from: 31/07/2026 to 28/08/2026 |
| Due date adjusted. |
|