Get Started

Platform 6.23

New features and enhancements

    1. Sort featured plans: To simplify the configuration of the featured plans for the training catalog, you can now select structured content plans (SCPs) from a list in alphabetical order. (PRTL-1895)
    2. MITRE ATT&CK improvements: MITRE ATT&CK visualizations now include wider columns with full scenario and technique names. (PRTL-4529)
    3. Live action plan workflow: The quick create (+) menu now includes an option to base new events on live action plans. (PRTL-4560)
    4. Deployment build logs: The deployment target is now available in deployment build logs. (PRTL-4571)
    5. Snapshot origin: For those self-hosting their installation, you can now identify whether snapshots originate from the SimSpace Platform or through its underlying VMware vSphere virtualization platform. The snapshot’s filename indicates its origin. (PRTL-4572)

Fixes

  1. Cancel featured plans: In the training catalog, removing a structured content plan from featured plans but canceling that action, inadvertently saved changes. Now, canceling doesn’t result in a save. (PRTL-2435)
  2. Readiness requirements: In Personnel > Work Role Definition > Create Requirement, the Add button was unavailable when the SCP had an excessively long name. You can now create readiness requirements even when the SCP has a long name. (PRTL-4330)
  3. Unclear target node: When you moved a node within Admin > Organization Structure, the system didn’t clearly indicate your selected target. There’s now a background color and icon change to indicate your target selection. (PRTL-4354)
  4. Linux user emulation: It was unclear whether a Linux user emulation (UE) account was part of a network domain or a local user account, due to the system showing site.lan for those accounts. It’s now clear that Linux UE are local accounts. (PRTL-4528)
  5. Manage files:  As the Event Manager of a live action event that included a range and a file uploaded through file management, selecting that file generated an oops error. Now, the file‘s details display. (PRTL-4585)
  6. Reservation end date:  As an administrator creating a range, it wasn’t possible to  create a reservation because the end date selector was always disabled. Administrators can now select end dates and complete their reservations. (PRTL-4592)
  7. Work role requirements: As an administrator creating requirements for work roles or reservations, you were previously unable to select a date or close out that calendar. Now, the calendar works as you’d expect. (PRTL-4612)
  8. Security improvements to the SimSpace Platform after penetration testing:
    • Code execution in CSV files: A vulnerability enabled insertion of untrusted user input into the Content Module’s Task Title. When that was exported to a CSV file, downloaded, and opened by the web browser it was possible to unknowingly execute a formula injection with local code execution. Now, user input faces additional input validation and escape encoding to prevent it. (PRTL-4449)
    • No restrictions on file uploads: Various Content Authoring pages enabled you to upload any file type. Files, such as XML files, were executed at upload location. This created a vulnerability where execution of code was possible. You can now only upload files with PNG and PDF extensions to prevent this. (PRTL-4450)
    • File type validation: As an administrator viewing or editing a content module, you could successfully upload a file that used a permitted extension but actually contained unpermitted file content. Now, MIME type validation rejects the file due to its internal contents, rather than trusting the file’s extension. (PRTL-4590)
  9. Various back-end and API endpoint improvements: Back-end components have updates to help improve compatibility, interoperability, and other functions. (PRTL-4471, PRTL-4473, PRTL-4509, PRTL-4540, PRTL-4559, PRTL-4561, PRTL-4581, PRTL-4635)

Related Resources