Activity
From 31 July 2025 to 29 August 2025
26 August 2025
- 02:58 PM Bug #22381 (New): [SIT][Android][Google API 35][Enable Fingerprint Login] Fingerprint Icon Not Sh...
- Steps to Reproduce:
1. Select “Settings” in side menu.
2. Toggle on "Enable Fingerprint Login".
3. Tap on "ENABLE"... - 02:43 PM Bug #22380 (New): [SIT][Android][Google API 35][Send Feedback] Show "Permissions Required" When U...
- Steps to Reproduce:
1. Select “Settings” in side menu.
2. Select "Send Feedback".
3. Tap on camera icon.
4. Show... - 11:29 AM Bug #22378 (New): [SIT][Android][Google API 35][My Accounts/ Transaction Summary] Show "We cant o...
- Impacted Functions:
1. Unit Trust
2. Bonds
3. Financial Information & Tax
4. Bancassurance
5. Account Statement
... - 09:50 AM Bug #22362 (Closed): [PROD][iOS][Inbox][Announcement] App Crashed When Tap on Announcement
- Released to production
- 09:50 AM Bug #22352 (Closed): [PROD][Android][My Accounts][Bonds/Unit Trust/Loans/Financial Information & ...
- Released to production
- 09:50 AM Bug #22350 (Closed): [PROD][Android][Transaction][Transaction Summary] Failed to Download Receipt
- Released to production
- 09:50 AM Bug #22325 (Closed): [PROD][Android] Show Permission Required Pop Up when Share Receipt
- Released to production
- 09:50 AM Bug #22317 (Closed): [PROD][Android] Show "Something went wrong with OCBC Business" at Google Pla...
- Released to production
- 09:49 AM Bug #22306 (Closed): [External Audit Findings][MLEB, iOS, Android] Bypass OTP in Biometric Activa...
- Released to production
- 09:49 AM Bug #22304 (Closed): [External Audit Findings][MLEB, iOS, Android] User Enumeration through Error...
- Released to production
- 09:49 AM Bug #22303 (Closed): [External Audit Findings][iOS] Weak SSL Pinning
- Released to production
- 09:48 AM Bug #22302 (Closed): [External Audit Findings][iOS] Certificate files hardcoded inside the app
- Released to production
- 09:48 AM Bug #22301 (Closed): [External Audit Findings][iOS] No Jailbreak Detection
- Released to production
- 09:48 AM Bug #22300 (Closed): [External Audit Findings][Android] Certificate files hardcoded inside the app
- Released to production
- 09:47 AM Bug #22286 (Closed): [UAT][Android][ATM & Branch]Hit Error When Tap on ATM & Branch
- Released to production
- 09:47 AM Bug #22283 (Closed): [PROD][Android] Version 1.0.43 Does Not Go Into Log Crashlytic
- Released to production
- 09:47 AM Bug #22276 (Closed): [PROD][iOS][Side Menu][My Accounts] "Financial Information & Tax Realization...
- Released to production
- 09:46 AM Bug #22275 (Closed): [PROD][Android][Fund Transfer][Manage Saved Beneficiary][Domestic Transfer][...
- Released to production
- 09:46 AM Bug #22274 (Closed): [PROD][Android][Fund Transfer][Manage Saved Beneficiary][Domestic Transfer][...
- Released to production
25 August 2025
- 06:01 PM Bug #22377 (New): [PROD][MLEB]Hit "mcb1000121.mcb1000121" When Makes a Transaction and Enters The...
- An error appears: "mcb1000121.mcb1000121" when a customer makes a transaction and enters their PIN.
Device Informa... - 05:56 PM Bug #22376 (New): [PROD][MLEB] Hit Error "WSS_ERROR_00001" When Authorizing a Transaction
- An error appears: "Error WSS_ERROR_00001" when authorizing a transaction. The customer has been experiencing this iss...
20 August 2025
- 04:21 PM Bug #22334 (Pending Information): [PROD][MLEB] Hit wss_error_00001 Error When Approve Transaction
- Requested more info from OCBC
- 04:21 PM Bug #22333 (Pending Information): [PROD][MLEB][LOGIN] Frequent Logouts on OCBC Business App Requi...
- Requested video from OCBC
- 04:20 PM Bug #22362 (Pending PROD): [PROD][iOS][Inbox][Announcement] App Crashed When Tap on Announcement
- OCBC product owner tested good in UAT
- 04:17 PM Bug #22362 (Pending UAT ): [PROD][iOS][Inbox][Announcement] App Crashed When Tap on Announcement
- Tested ok in SIT
- 11:49 AM Bug #22362 (Resolved): [PROD][iOS][Inbox][Announcement] App Crashed When Tap on Announcement
- Root cause:
The view file that navigate to doesn't exist. Caused by incorrect navigate destination.
Solution:
Fi... - 11:37 AM Bug #22362 (Closed): [PROD][iOS][Inbox][Announcement] App Crashed When Tap on Announcement
- Steps to Reproduce:
1. Go to Inbox.
2. Select "Announcement" tab.
3. Tap on announcement.
Actual Result:
App c... - 04:19 PM Bug #22350 (Pending PROD): [PROD][Android][Transaction][Transaction Summary] Failed to Download R...
- 09:53 AM Bug #22350 (Pending UAT ): [PROD][Android][Transaction][Transaction Summary] Failed to Download R...
- 04:18 PM Bug #22352 (Pending PROD): [PROD][Android][My Accounts][Bonds/Unit Trust/Loans/Financial Informat...
- 09:52 AM Bug #22352 (Pending UAT ): [PROD][Android][My Accounts][Bonds/Unit Trust/Loans/Financial Informat...
18 August 2025
- 05:58 PM Bug #22352 (Assigned): [PROD][Android][My Accounts][Bonds/Unit Trust/Loans/Financial Information ...
- 05:58 PM Bug #22352 (Resolved): [PROD][Android][My Accounts][Bonds/Unit Trust/Loans/Financial Information ...
- 18-8-2025
Bug #22350
[PROD][Android][Transaction][Transaction Summary] Failed to Download Receipt
Bug #22352
[P... - 04:19 PM Bug #22352 (Closed): [PROD][Android][My Accounts][Bonds/Unit Trust/Loans/Financial Information & ...
- Steps to Reproduce:
1. Select “My Accounts” in side menu.
2. Select “Bonds/Unit Trust”.
3. Select "CIF".
4. Tap o... - 05:57 PM Bug #22350 (Assigned): [PROD][Android][Transaction][Transaction Summary] Failed to Download Receipt
- 05:57 PM Bug #22350 (Resolved): [PROD][Android][Transaction][Transaction Summary] Failed to Download Receipt
- 18-8-2025
Bug #22350
[PROD][Android][Transaction][Transaction Summary] Failed to Download Receipt
Bug #22352
[P... - 04:25 PM Bug #22350: [PROD][Android][Transaction][Transaction Summary] Failed to Download Receipt
- Actual Result:
Failed to download receipt.
Expected Result:
Successfully download receipt. - 04:13 PM Bug #22350 (Closed): [PROD][Android][Transaction][Transaction Summary] Failed to Download Receipt
- Steps to Reproduce:
1. Select “Transactions” in side menu.
2. Select “Transaction Summary”.
3. Select "Manual".
4... - 02:57 PM Bug #22335: [SIT][Android][Create Software Token] Hit MCB Error When Input OTP
- today hit the error again
Org ID: UATFLX
Username: FELIX
14 August 2025
- 10:07 AM Bug #22335 (New): [SIT][Android][Create Software Token] Hit MCB Error When Input OTP
- Steps to Reproduce:
1. Login screen, input Org ID - SUBSESTER001, User ID - FELIX2 and Password then tap on "LOGIN" ...
13 August 2025
- 03:02 PM Bug #22334 (Pending Information): [PROD][MLEB] Hit wss_error_00001 Error When Approve Transaction
- Customers cannot approve transactions, when approving transactions an error appears: wss_error_00001
device infor... - 02:58 PM Bug #22333 (Pending Information): [PROD][MLEB][LOGIN] Frequent Logouts on OCBC Business App Requi...
- Often, when a customer opens the OCBC Business application, the application logs out and the customer has to re-enter...
- 11:49 AM Bug #22304: [External Audit Findings][MLEB, iOS, Android] User Enumeration through Error Messages
- OCBC requested to change new wording for error message s0014
08 August 2025
- 11:56 AM Bug #22301: [External Audit Findings][iOS] No Jailbreak Detection
- Need to add the appcamo framework into the source code in next release.
Integrated AppCamo and conducted testing o... - 11:45 AM Bug #22301 (Pending PROD): [External Audit Findings][iOS] No Jailbreak Detection
- 11:51 AM Bug #22299 (Closed): [External Audit Findings][Android] Weak Root Detection
- According to OCBC product owner, their shielding vendor can detect rooted devices, so no action is needed from the SL...
- 11:48 AM Bug #22302 (Pending PROD): [External Audit Findings][iOS] Certificate files hardcoded inside the app
- 11:47 AM Bug #22274 (Pending PROD): [PROD][Android][Fund Transfer][Manage Saved Beneficiary][Domestic Tran...
- 11:47 AM Bug #22275 (Pending PROD): [PROD][Android][Fund Transfer][Manage Saved Beneficiary][Domestic Tran...
- 11:46 AM Bug #22276 (Pending PROD): [PROD][iOS][Side Menu][My Accounts] "Financial Information & Tax Reali...
- 11:46 AM Bug #22283 (Pending PROD): [PROD][Android] Version 1.0.43 Does Not Go Into Log Crashlytic
- 11:45 AM Bug #22286 (Pending PROD): [UAT][Android][ATM & Branch]Hit Error When Tap on ATM & Branch
- 11:45 AM Bug #22300 (Pending PROD): [External Audit Findings][Android] Certificate files hardcoded inside ...
- 11:45 AM Bug #22303 (Pending PROD): [External Audit Findings][iOS] Weak SSL Pinning
- 11:36 AM Bug #22304 (Pending PROD): [External Audit Findings][MLEB, iOS, Android] User Enumeration through...
- 11:35 AM Bug #22305 (Pending PROD): [External Audit Findings][MLEB, iOS, Android] Insecure Direct Object R...
- 11:35 AM Bug #22306 (Pending PROD): [External Audit Findings][MLEB, iOS, Android] Bypass OTP in Biometric ...
- 11:35 AM Bug #22317 (Pending PROD): [PROD][Android] Show "Something went wrong with OCBC Business" at Goog...
- Due to the lack of specific phone model and device OS information, unable to simulate the issue and test the fix on o...
- 10:35 AM Bug #22317 (Assigned): [PROD][Android] Show "Something went wrong with OCBC Business" at Google P...
- 238,025
Updated encrypted method due to certain devices unable to get firebase token
238,064
31/7/2025 change ba... - 10:32 AM Bug #22325 (Pending PROD): [PROD][Android] Show Permission Required Pop Up when Share Receipt
- tested ok in UAT
- 10:31 AM Bug #22325 (Pending UAT ): [PROD][Android] Show Permission Required Pop Up when Share Receipt
- 10:27 AM Bug #22325 (Assigned): [PROD][Android] Show Permission Required Pop Up when Share Receipt
- 10:27 AM Bug #22325 (Resolved): [PROD][Android] Show Permission Required Pop Up when Share Receipt
- 238,103
update for android 15 screenshot error
238,117
8/8/2025 Bug #22325 [PROD][Android] Show Permission Requi...
07 August 2025
- 02:38 PM Bug #22325 (Closed): [PROD][Android] Show Permission Required Pop Up when Share Receipt
- Steps to reproduce:
1. Perform Own Account Transfer
2. After successfully perform transaction, tap on "SHARE" butto...
06 August 2025
- 11:12 AM Bug #22283 (Pending UAT ): [PROD][Android] Version 1.0.43 Does Not Go Into Log Crashlytic
- 11:11 AM Bug #22276 (Pending UAT ): [PROD][iOS][Side Menu][My Accounts] "Financial Information & Tax Reali...
- 11:08 AM Bug #22301 (Pending UAT ): [External Audit Findings][iOS] No Jailbreak Detection
- 11:07 AM Bug #22300 (Pending UAT ): [External Audit Findings][Android] Certificate files hardcoded inside ...
- 11:06 AM Bug #22302 (Pending UAT ): [External Audit Findings][iOS] Certificate files hardcoded inside the app
- 11:06 AM Bug #22303 (Pending UAT ): [External Audit Findings][iOS] Weak SSL Pinning
- 11:05 AM Bug #22304 (Pending UAT ): [External Audit Findings][MLEB, iOS, Android] User Enumeration through...
- 10:58 AM Bug #22305 (Pending UAT ): [External Audit Findings][MLEB, iOS, Android] Insecure Direct Object R...
- 10:39 AM Bug #22306 (Pending UAT ): [External Audit Findings][MLEB, iOS, Android] Bypass OTP in Biometric ...
- Released to UAT
- 08:50 AM Bug #22274 (Pending UAT ): [PROD][Android][Fund Transfer][Manage Saved Beneficiary][Domestic Tran...
05 August 2025
- 04:43 PM Bug #22300: [External Audit Findings][Android] Certificate files hardcoded inside the app
- 238,098
5/8/2025 Bug #22300 [External Audit Findings][Android] Certificate files hardcoded inside the app
Remove ... - 04:31 PM Bug #22274 (Assigned): [PROD][Android][Fund Transfer][Manage Saved Beneficiary][Domestic Transfer...
- 04:30 PM Bug #22274 (Resolved): [PROD][Android][Fund Transfer][Manage Saved Beneficiary][Domestic Transfer...
- 238,097
5/8/2025 Bug #22274 [PROD][Android][Fund Transfer][Manage Saved Beneficiary][Domestic Transfer][Online Trans... - 04:10 PM Bug #22274 (Assigned): [PROD][Android][Fund Transfer][Manage Saved Beneficiary][Domestic Transfer...
- Please help to change for EN and ID too. Should show "Online Transfer".
04 August 2025
- 02:29 PM Bug #22306 (Resolved): [External Audit Findings][MLEB, iOS, Android] Bypass OTP in Biometric Acti...
- RC: Modification of response parameters in the API allows an attacker to alter values such as item prices, item quant...
- 02:27 PM Bug #22305 (Resolved): [External Audit Findings][MLEB, iOS, Android] Insecure Direct Object Refer...
- RC: The IDOR vulnerability occurs when an app exposes internal object references without access control. This allows ...
- 12:12 PM Bug #22283: [PROD][Android] Version 1.0.43 Does Not Go Into Log Crashlytic
- 238,095
4/8/2025 [PROD][Android] Version 1.0.43 Does Not Go Into Log Crashlytic
update google-service.json for ua...
01 August 2025
- 10:10 PM Bug #22306: [External Audit Findings][MLEB, iOS, Android] Bypass OTP in Biometric Activation
- 238,077
1/8/2025 [External Audit Findings][MLEB] Bypass OTP in Biometric Activation
Issue:
Modification of respons... - 04:15 PM Bug #22300 (Resolved): [External Audit Findings][Android] Certificate files hardcoded inside the app
- merged into trunk
- 03:09 PM Bug #22300: [External Audit Findings][Android] Certificate files hardcoded inside the app
- 238,072
1–8-2025 Bug #22300 [External Audit Findings][Android] Certificate files hardcoded inside the app
Issue:
S... - 11:33 AM Bug #22305: [External Audit Findings][MLEB, iOS, Android] Insecure Direct Object Reference Vulner...
- 238,070
1/8/2025 [External Audit Findings][MLEB] Insecure Direct Object Reference Vulnerability (IDOR)
Issue:
Th...
31 July 2025
- 02:40 PM Bug #22317 (Closed): [PROD][Android] Show "Something went wrong with OCBC Business" at Google Pla...
- Please refer to attached image for details.
Please provide root cause and solution. - 10:52 AM Bug #22304: [External Audit Findings][MLEB, iOS, Android] User Enumeration through Error Messages
- 238,053
31/7/2025 [External Audit Findings][MLEB] User Enumeration through Error Messages
Issue:
Error messages in... - 09:58 AM Bug #22304 (Resolved): [External Audit Findings][MLEB, iOS, Android] User Enumeration through Err...
- RC: Error messages provides valid and invalid username information.
Solution: Modify error message to generic mess...
Also available in: Atom