Replies posted by Phil Lamerton

86 Replies

Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

I see that patch for IFS10 is ready: 161936 IFS Apps 10 is mitigated in cloud, but as per the KBA, patching for on premise customers is due for release tomorrow

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

So for Apps 10 does that mean we’ll get the patch soon, or do we have to wait until after 3 March to get it? We are anticipating it will be be available on the 17th December but also available in the release in March.

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

Update (16th December 2021 13:00 UTC)

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

Updated (16th December 2021 9:00 UTC)

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

Something i didn’t see written anywhere yet; will the Fix be delivered automatically to the client (via SFTP), or does each client need to reach out to their contact persons / create a LCS request? Hi Arend,This is being discussed at the moment, the minute I know more I will update the KBA ThanksPhil

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

Update (15th December 2021 19:30 UTC)

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

Update (15th December 2021 16:00 UTC)

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

Update (15th December 2021 15:30 UTC) 

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

@Phil Lamerton   Hi Phil, will that knowledge article will updated the soon, when fix available for IFS 10 and IFS cloud (On Premise)   Thank you for providing these  updates.    kr Amila Hi AmilaThe KBA will be updated the minute I have further information, I cannot give you an answer right now but further updates are being put together.ThanksPhil

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

Update (15th December 2021 13:05 UTC)

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

Along with FSM,  is the FSM mobile app (android) also unaffected? That is correct 

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

It took some time for me to figure - The Impact KBA can be accessed by clicking a link in one of the updates at the top of this bulletin -  Thank you IFS for providing these timely updates.  Thank you! Yes that is the link 

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

Update (14th December 202118:15 UTC)The Impact KBA has been updated to confirm that Clevest is not impacted by the vulnerability

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

HI,    How do we check the log4j version in the IFS?    Thanks  Please see the latest update which includes a link to a new KBA with further info

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

Following the latest comment on  log4j version 2.15 being unaffected, can you advise how we can identify this if we are a IFS Cloud services customer.  Jeremy Please see the latest update which includes a link to a new KBA with further info

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

Update (14th December 2021 17:00hrs UTC)

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

  Hi, Is the touch-app-server affected? If exposed, this might be the most vulnerable point. I can imagine touch apps being the biggest worry here, do we know when this is being looked at?  As explained above, the situation surrounding this vulnerability and specific versions of log4j that are affected continues to evolve across the software industry.  It is a complex landscape with new information continually becoming available.  The current state is that log4j version 2.15 and above is unaffected but prior versions are potentially vulnerable to this exploit.  IFS will continue to use this bulletin to share information regarding affected and unaffected products as soon as either is confirmed and actionable.

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

is there any information on how IFS Cloud are protecting our cloud-hosted implementation while IFS assess the impact of the vulnerability? As explained above, the situation surrounding this vulnerability and specific versions of log4j that are affected continues to evolve across the software industry.  It is a complex landscape with new information continually becoming available.  The current state is that log4j version 2.15 and above is unaffected but prior versions are potentially vulnerable to this exploit.  IFS will continue to use this bulletin to share information regarding affected and unaffected products as soon as either is confirmed and actionable.

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

This is most hot news. when do we expect any fix for this. urgent response is appreciated.    As explained above, the situation surrounding this vulnerability and specific versions of log4j that are affected continues to evolve across the software industry.  It is a complex landscape with new information continually becoming available.  The current state is that log4j version 2.15 and above is unaffected but prior versions are potentially vulnerable to this exploit.  IFS will continue to use this bulletin to share information regarding affected and unaffected products as soon as either is confirmed and actionable.

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
aravindhan
Sidekick
aravindhanSidekick
asked in Upgrades & Updates

Apache Log4j vulnerability CVE-2021-44228

Please Update on the Apache Log4j vulnerability CVE-2021-44228 Please subscribe to this KBA as mentioned above, it is updated regularly 

8
H
Hero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

UPDATED (14th December 2021 07:45hrs UTC)

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

  Hi, Is the touch-app-server affected? If exposed, this might be the most vulnerable point. The list of unaffected products is being updated as we discover it, Touch Apps has not yet been excluded, we will keep updating as we know more.

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

Do you have any recommendation while waiting for the updates? We have exposed IFS Aurena externally outside our domain with Netscaler and reverse proxy. Do you recommend that we close this while waiting? Protecting the service access in the interim is a good thing, but we cannot validate the approach in detail at this time.

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

Update (13th December 2021 15:45hrs UTC)ADDED UNAFFECTED PRODUCTS

1949574
Phil Lamerton
Superhero (Employee)
2 years ago
Phil Lamerton
Superhero (Employee)
Phil LamertonSuperhero (Employee)
published in Announcements

URGENT BULLETIN - IFS Advisory:  IFS Products, Services and Log4j - ​CVE-2021-44228URGENT BULLETIN

Do you have any recommendation while waiting for the updates? We have exposed IFS Aurena externally outside our domain with Netscaler and reverse proxy. Do you recommend that we close this while waiting? Hi, Are you on IFS Cloud or On Premise? 

1949574
Phil Lamerton
Superhero (Employee)
2 years ago

Badges

Show all badges
Terms & ConditionsCookie settings