NTLM Vulnerability in Portfolio 3.x and 4.x
Who Does This Affect?
This article applies to users running Portfolio 3.x and 4.x
Why Is This Happening?
On My 5th, 2022 researchers reported https://nvd.nist.gov/vuln/detail/CVE-2022-26925 detailing a security vulnerability involving NTLM relay attacks.
Is Portfolio Affected?
No. Portfolio 3.x and 4.x are not affected by this vulnerability as we do not use NTLM. We use LDAP Bind over SSL for user/password authentication, and Kerberos for SSO.
Related Articles
Portfolio and OpenSSL 3.x Vulnerability
Who Does This Affect? This article applies to users running Portfolio 3.x and 4.x Why Is This Happening? On November 1st, 2022 researchers reported CVE-2022-3602 and CVE-2022-3786, detailing an exploit in OpenSSL 3.x that allow remote code execution ...
Upgrading to Portfolio 4.x
This article describes upgrading from Portfolio 3.6.3 to the latest version of Portfolio 4. Frequently Asked Questions What systems can I upgrade? Portfolio 4 can only upgrade a Portfolio 3.6.3 installation. See Upgrading from earlier versions below ...
Portfolio, Log4j, Apache vulnerabilities
Who does this affect? This article applies to users running Portfolio 3.x and 4.x. Issue On December 10, 2021 researchers reported CVE-2021-44228, detailing an exploit in the Log4j library that allowed a malicious user to run code on an affected ...
Portfolio Glossary
Following are some terms used throughout Portfolio and its documentation. Some are technical (“computer”) terms that relate to Portfolio features and services, some are fundamental concepts within Portfolio, and some are terms that relate to Digital ...
Portfolio Server Requirements and Recommendations
Portfolio Server can be installed locally (“on premises”) to dedicated Windows Server or macOS instances, or to a Windows Server residing within cloud-hosted environments such as Amazon EC2 or Microsoft Azure. Local System Requirements These are the ...