PROBLEM:CMS400 Security Update

Applies To:

Summary:

Ektron has an update for a security issue found in CMS400 for version 7.0X and 7.50, 7.51, and 7.52. This is not an issue in version 7.53 or above.

We have remedied the issue and have a resolution for the versions affected.

Symptoms:

• A page in the workarea folder was susceptible to attack by dishonest companies that attempt to maliciously execute this page. There have been no reported cases of this happening that Ektron is aware of and there are ways to prevent this type of attack through best practices of setting up an Ektron CMS site.

  Changing the name of your workarea folder during the installation is one way to prevent attacks of this nature.

   

Solutions:

• Extract the file from the update into your workarea folder replacing the original:

  CMS400 7.50, 7.51, and 7.52 (note: not needed for version 7.53 and above)
  http://downloads2.ektron.com/updates/cms400/cms400_v75_securityupdate_1.zip

  CMS400 7.00, 7.01, 7.02, 7.03, and 7.04
  http://downloads2.ektron.com/updates/cms400/cms400_v70_securityupdate_1.zip

  Should you require assistance installing this update or have further questions please contact Ektron Support.