SECURITY EXCEPTION in scheduler
After update from 11141 to 11204 the schedulers task does not work. Befor update it worked good
In the server log I see:
--------------------------------
[skip]
[09:19:32:529]|[06-07-2021]|[com.manageengine.mdh.MDHFilter]|[INFO]|[58]: PORTALID : 1|
[09:19:32:529]|[06-07-2021]|[com.manageengine.mdh.MDHUsers]|[SEVERE]|[58]: Exception while getting user credentials in getUserId. Assuming Non-Login view.|
[09:19:32:529]|[06-07-2021]|[com.adventnet.servicedesk.filter.RememberMe]|[INFO]|[58]: ###successMessage : null; ###isRequestedSessionIdValid : false|
[09:19:32:544]|[06-07-2021]|[com.manageengine.servicedesk.filter]|[INFO]|[58]: SdpSecurityFilter called |
[09:19:32:544]|[06-07-2021]|[com.manageengine.servicedesk.filter]|[INFO]|[58]: RequestURI::::::: /api/v3/requests/156|
[09:19:32:544]|[06-07-2021]|[com.manageengine.servicedesk.filter]|[INFO]|[58]: urlRule::::::: URLRule :: path = "/api/v3/requests/(\d+)" urlInRegex = "true"|
[09:19:32:544]|[06-07-2021]|[com.manageengine.servicedesk.filter]|[INFO]|[58]: actionParamValue::::::: null|
[09:19:32:544]|[06-07-2021]|[com.manageengine.servicedesk.filter]|[INFO]|[58]: actionRule::::::: ActionRule :: Path : "/api/v3/requests/(\d+)" method :"PUT"" isCSRFProtected : "false" internal : "false" trusted : "false" roles : "" dynamicParams : "false" api : "true" isc : "false" authentication : "required" throwAllErrors : "false" urlXSSValidation : "true" ipBlockCheck : "false" loginThrowError : "false "" iscScope : "null" runAsGroupIdParam : "null" runAsGroupTypeParam : "null "isThrottlesConfigured : "true "dynamic-throttles : "false|
[09:19:32:544]|[06-07-2021]|[com.manageengine.mdh.MDHUsers]|[SEVERE]|[58]: Exception while getting user credentials in getUserId. Assuming Non-Login view.|
[09:19:32:607]|[06-07-2021]|[com.adventnet.iam.security.ParameterRule]|[SEVERE]|[58]: The parameter "format" for the URL "/api/v3/requests/156" is more than the maximum occurances configured in the param rule :
ParameterRule :: paramName : "format" index : "null" paramNameInRegex : "null" allowedValueRegex : "json" minLength : "0" maxLength : "-1" minOccurrences : "0" maxOccurrences : "1" canonicalize : "false" isParamNameInRegex : "false" dataType : "String" xssValidation : "null" decrypt : "false" salt-delim : "null" salt-ticket : "false" salt-validity : "-1" trim : "null" secret : "false" Range : "null" defaultValue : "null" template : "null" xmlSchemaValidation : "false" xmlSchemaName : "null" arraySize : "0-10" allowEmpty : "null"|
[09:19:32:607]|[06-07-2021]|[com.adventnet.iam.security.IAMSecurityException]|[INFO]|[58]: IAMSecurityException ErrorCode: MORE_THAN_MAX_OCCURANCE, RequestURI: "/api/v3/requests/156", RemoteAddr: "0:0:0:0:0:0:0:1", Referrer: "null", ParameterName: "format", No Of Occurance: "2", Parameter Rule: "ParameterRule :: paramName : "format" index : "null" paramNameInRegex : "null" allowedValueRegex : "json" minLength : "0" maxLength : "-1" minOccurrences : "0" maxOccurrences : "1" canonicalize : "false" isParamNameInRegex : "false" dataType : "String" xssValidation : "null" decrypt : "false" salt-delim : "null" salt-ticket : "false" salt-validity : "-1" trim : "null" secret : "false" Range : "null" defaultValue : "null" template : "null" xmlSchemaValidation : "false" xmlSchemaName : "null" arraySize : "0-10" allowEmpty : "null""|
[09:19:32:607]|[06-07-2021]|[com.adventnet.iam.security.SecurityFilter]|[SEVERE]|[58]: IAMSecurityException Error Code : MORE_THAN_MAX_OCCURANCE |
[09:19:32:607]|[06-07-2021]|[com.manageengine.servicedesk.filter]|[INFO]|[58]:
|
[09:19:32:607]|[06-07-2021]|[com.manageengine.servicedesk.filter]|[INFO]|[58]: =======================================================|
[09:19:32:607]|[06-07-2021]|[com.manageengine.servicedesk.filter]|[INFO]|[58]: ZOHO Security Error Message : This Request will not be considered since passing more duplicate parameters to server might result in vulnerability issues.|
[09:19:32:607]|[06-07-2021]|[com.manageengine.servicedesk.filter]|[INFO]|[58]: =======================================================|
[09:19:32:607]|[06-07-2021]|[com.manageengine.mdh.MDHFilter]|[INFO]|[58]: PORTALID : 1|
[09:19:32:607]|[06-07-2021]|[com.manageengine.servicedesk.filter]|[INFO]|[58]: SdpSecurityFilter called |
[09:19:32:607]|[06-07-2021]|[com.manageengine.servicedesk.filter]|[INFO]|[58]: RequestURI::::::: /Error|
[09:19:32:607]|[06-07-2021]|[com.manageengine.servicedesk.filter]|[INFO]|[58]: urlRule::::::: URLRule :: path = "/Error" urlInRegex = "false"|
[09:19:32:607]|[06-07-2021]|[com.manageengine.servicedesk.filter]|[INFO]|[58]: actionParamValue::::::: null|
[09:19:32:607]|[06-07-2021]|[com.manageengine.servicedesk.filter]|[INFO]|[58]: actionRule::::::: ActionRule :: Path : "/Error" method :"PUT"" isCSRFProtected : "false" internal : "false" trusted : "false" roles : "" dynamicParams : "false" api : "false" isc : "false" authentication : "required" throwAllErrors : "false" urlXSSValidation : "true" ipBlockCheck : "false" loginThrowError : "false "" iscScope : "null" runAsGroupIdParam : "null" runAsGroupTypeParam : "null "isThrottlesConfigured : "false "dynamic-throttles : "false|
[09:19:32:607]|[06-07-2021]|[com.adventnet.iam.security.URLRule]|[WARNING]|[58]: Extra parameter found: the parameter List : [TECHNICIAN_KEY, format, input_data] for the URI : PUT : /Error|
[09:19:32:622]|[06-07-2021]|[com.manageengine.servicedesk.filter]|[INFO]|[58]:
--------------------------------
Why it and how it fix?