Integrating Virtual Table Server (VTS) with LoadRunner Professional (LRP) 12.53
| ♥ 0 |
We would like to get more information about integrating VTS with LRP12.53 and if there are any known issues? Any input would be great.
Marked as spam
|
Posted by |
Private answer
I would recommend upgrading to the Latest Version of LoadRunner Professional 2020 SP3 for your entire LRP environment. Please beware that LoadRunner Professional 12.53 VTS is vulnerable to stored cross-site scripting XSS, which allows attacker to inject malicious code. Micro Focus has stated the following in regards to 12.53 VTS:
"VTS component is vulnerable to stored cross-site scripting XSS. This applies to LoadRunner and Performance Center 12.53 and earlier LoadRunner and Performance Center include Virtual Table Server (VTS) component. VTS, once installed, can be accessed via a web interface. The VTS web interface is vulnerable to stored cross-site scripting (XSS). An attacker can inject malicious JavaScript code into the table cell field in VTS interface, which will later can be executed in the context of another user's browser. This allows an attacker to hijack another user's session or take control of their browser. Both the attacked and the attacked user need to have access to the VTS web interface. Important: the vulnerability does not affect any other LoadRunner or Performance Center component or user interface except for Virtual Table Server (VTS). Only VTS is affected."
Newer versions of VTS do not have this issue. There have been many enhancements and feature upgrades from LoadRunner Professional 12.53 to 2020 SP3. This is why we recommend upgrading your LoadRunner Professional environment to the latest version.
For more information on VTS, please see the links below:
For detailed information on Installing and General Usage of LoadRunner Professional 12.53 VTS, please see the link below:
I hope this helps Marked as spam
 Posted by jeffrey-gardner-1 (Questions: 17, Answers: 266) Answered on October 19, 2020 11:13 am
|