Portfolio and OpenSSL 3.x Vulnerability

Portfolio and OpenSSL 3.x Vulnerability

Who Does This Affect?

This article applies to users running Portfolio 3.x and 4.x

Why Is This Happening?

On November 1st, 2022 researchers reported CVE-2022-3602 and CVE-2022-3786, detailing an exploit in OpenSSL 3.x that allow remote code execution on an affected system.

On May 4th, 2016 researchers reported CVE-2016-2107 detailing an exploit in OpenSSL 3.x regarding a specific type of encryption used

Is Portfolio Affected?

Portfolio 3.x and 4.x are affected by CVE-2016-2107. Please follow these instructions to disable TLS 1.0 and 1.1 in your environment: Disabling older versions of TLS in Portfolio

 

    • Related Articles

    • NTLM Vulnerability in Portfolio 3.x and 4.x

      Who Does This Affect? This article applies to users running Portfolio 3.x and 4.x Why Is This Happening? On My 5th, 2022 researchers reported https://nvd.nist.gov/vuln/detail/CVE-2022-26925 detailing a security vulnerability involving NTLM relay ...

    • Upgrading to Portfolio 4.x

      This article describes upgrading from Portfolio 3.6.3 to the latest version of Portfolio 4. Frequently Asked Questions What systems can I upgrade? Portfolio 4 can only upgrade a Portfolio 3.6.3 installation. See Upgrading from earlier versions below ...

    • Portfolio, Log4j, Apache vulnerabilities

      Who does this affect? This article applies to users running Portfolio 3.x and 4.x. Issue On December 10, 2021 researchers reported CVE-2021-44228, detailing an exploit in the Log4j library that allowed a malicious user to run code on an affected ...

    • Portfolio Glossary

      Following are some terms used throughout Portfolio and its documentation. Some are technical (“computer”) terms that relate to Portfolio features and services, some are fundamental concepts within Portfolio, and some are terms that relate to Digital ...

    • Portfolio Server Requirements and Recommendations

      Portfolio Server can be installed locally (“on premises”) to dedicated Windows Server or macOS instances, or to a Windows Server residing within cloud-hosted environments such as Amazon EC2 or Microsoft Azure. Local System Requirements These are the ...