Who Does This Affect?

This article applies to users running Portfolio 3.x and 4.x

Why Is This Happening?

On My 5th, 2022 researchers reported https://nvd.nist.gov/vuln/detail/CVE-2022-26925 detailing a security vulnerability involving NTLM relay attacks.

Is Portfolio Affected?

No. Portfolio 3.x and 4.x are not affected by this vulnerability as we do not use NTLM. We use LDAP Bind over SSL for user/password authentication, and Kerberos for SSO.