Knowledge Document: Security vulnerabilities discovered during external penetration testing on Filr 24.1

Caroline Oest OpenText Employee

0 Likes

6 months ago

Vulnerabilities found during external penetration testing on Filr 24.1

Environment

OpenText Filr 24.1

Situation

An independent IT security company has conducted a penetration test on external facing systems. One of the findings was that FILR 24.1 leaks unnecessary information via verbose error messages. Common types of leaked information include operating system, system path, software versions that allows an attacker to then search for vulnerabilities and exploits associated with the target application and underlying system. In the case of Filr 24.1 it was found when sending invalid requests to the file repository system.

Access resolution on support portal

Tags:

penetration testing

Filr

Labels:

Support Tips/Knowledge Docs

Comment List

Robin Redgrave 6 months ago in reply to fga

On this month's webinar the PM said that the 24.3 release would be in July. I suspect we will get an update on next week's webinar or you can ask him directly.
- Cancel
- Vote Up 0 Vote Down
- Sign in to reply
- More
- Cancel
Caroline Oest 6 months ago in reply to fga

@fga, I will ask the Filr team and will get back to you asap!

OpenText Community Manager
If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button
- Cancel
- Vote Up 0 Vote Down
- Sign in to reply
- More
- Cancel
fga 6 months ago

When can we expect the release of filr 24.3? Any CVSS or mitigations?
- Cancel
- Vote Up 0 Vote Down
- Sign in to reply
- More
- Cancel

Recommended

Menu

Filr Tips

Knowledge Document: Security vulnerabilities discovered during external penetration testing on Filr 24.1

Environment

Situation

Tags:

Labels:

Resources