Integrating Virtual Table Server (VTS) with LoadRunner Professional (LRP) 12.53

Question ID: 109866
0
0

We would like to get more information about integrating VTS with LRP12.53 and if there are any known issues? Any input would be great.

Marked as spam
Posted by (Questions: 156, Answers: 15)
Asked on October 19, 2020 11:11 am
7 views
Answers (1)
0
Private answer

I would recommend upgrading to the Latest Version of LoadRunner Professional 2020 SP3 for your entire LRP environment.  Please beware that LoadRunner Professional 12.53  VTS is vulnerable to stored cross-site scripting XSS, which allows attacker to inject malicious code. Micro Focus has stated the following in regards to 12.53 VTS:

 

"VTS component is vulnerable to stored cross-site scripting XSS. This applies to LoadRunner and Performance Center 12.53 and earlier

LoadRunner and Performance Center include Virtual Table Server (VTS) component. VTS, once installed, can be accessed via a web interface. The VTS web interface is vulnerable to stored cross-site scripting (XSS). An attacker can inject malicious JavaScript code into the table cell field in VTS interface, which will later can be executed in the context of another user's browser. This allows an attacker to hijack another user's session or take control of their browser. Both the attacked and the attacked user need to have access to the VTS web interface.

Important: the vulnerability does not affect any other LoadRunner or Performance Center component or user interface except for Virtual Table Server (VTS). Only VTS is affected."

 

Newer versions of VTS do not have this issue.  There have been many enhancements and feature upgrades from LoadRunner Professional 12.53 to 2020 SP3. This is why we recommend upgrading your LoadRunner Professional environment to the latest version.

 

For more information on VTS, please see the links below:

 

 

  • VTS Overview:

 

https://admhelp.microfocus.com/vugen/en/2020_SP2-SP3/help/WebHelp/Content/VTS/c_getting-started.htm?tocpath=Virtual%20Table%20Server%20(VTS)%7CVirtual%20Table%20Server%20(VTS)%7C_____0

 

  • Install VTS:

 

https://admhelp.microfocus.com/vugen/en/2020_SP2-SP3/help/WebHelp/Content/VTS/c_install.htm?Highlight=install%20VTS

 

  • VTS Table Manipulation:

 

https://admhelp.microfocus.com/vugen/en/2020_SP2-SP3/help/WebHelp/Content/VTS/c_table.htm?tocpath=Virtual%20Table%20Server%20(VTS)%7CVirtual%20Table%20Server%20(VTS)%7CVTS%20Data%7C_____1

 

 

For detailed information on Installing and General Usage of LoadRunner Professional 12.53 VTS, please see the link below:

 

 

I hope this helps

Marked as spam
Posted by (Questions: 17, Answers: 263)
Answered on October 19, 2020 11:13 am