Versions Compared

Old Version 6

changes.mady.by.user Grace Potma

Saved on

compared with

New Version Current

changes.mady.by.user Grace Potma

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

\uD83D\uDEA9 Milestones and deadlines

Milestone

Owner

Deadline

Status

StatuscolourYellowtitlein progress

Notes and Links

  1. Completed 3rd party Pen Test of O3 RefApp

Grace Potma

Status
colour

Green

Yellow
title

complete

in progress

Provided by UnderDefense (after public RFA and extensive vendor review). Preliminary report received. Grade was a “C”, OWASP 7/10.
Will share public report after remediation testing and after passing best practices.

  1. Create new, private Vulnerability Tracker (since Jira config hasn’t proven entirely trustworthy for embargoed issues we don’t want to make public yet)

Grace Potma

Status
colour

Yellow

Green
title

in progress

complete

Only for approved OpenMRS Security Group/squad members. https://docs.google.com/spreadsheets/d/12os55e_sDzzCmwm_lJWt7atqPABqq94LCwLOrApr8v4/edit?usp=sharing

  1. Completed fixes for issues found during 3rd party Pen Test

raff

(Aug 14 for UnderDefense to complete remediation testing)

Status
colourYellow
titlein progress

Triage list of unresolved vulnerabilities into the new, private Vulnerability Tracker

Update as of July 31: High and Medium issues almost completed. Most of what remains are Low.

  1. Add default support for Authentication Module into O3 RefApp.

Samuel Lubwama & Org Administrator

Status
titlenot started

  1. Triage list of unresolved vulnerabilities into the new, private Vulnerability Tracker

Samuel Lubwama, Org Administrator & Grace Potma

Status
colourYellow
titlein progress

Unresolved vulnerabilities available through Security Group on Talk + publicly reported on GitHub

  1. More detailed sample Implementer Guides for implementation security maintenance.

IntelliSOFT Consulting Ltd.

Status
colourYellow
titlein progress

...

See sample guides listed under: https://openmrs.atlassian.net/wiki/x/Sr2EAQ