In Acquisition Module, When new Budget is created, the END DATE must be greater than the START DATE. However, application is accepting END DATE which is smaller than START DATE. As a result, at the server backend, the validation is not happening making a way for manipulating the budget and suspicious act that leads to security violation. Therefore, request you to help us in fixing the issue by setting / writing code guidelines, which allows the user to select / enter START DATE that is SMALLER END DATE.
Can you explain a bit more why you see this as a security bug rather than a regular bug?
Changing this to a normal bug since there's no indication how it's a security bug
I haven't been able to reproduce this bug. I go to create a new budget, and the interface does not allow me to save or enter an END DATE which is earlier than the START DATE. Please advise if you're using a different process. In the meantime I am closing this report.