[SHARING/WARNNG] - Are You Vulnerable

Focal Point

This topic can be found at:
https://forums.informationbuilders.com/eve/forums/a/tpc/f/7971057331/m/3697006676

June 07, 2015, 09:19 PM

TexasStingray

[SHARING/WARNNG] - Are You Vulnerable

I'm just trying to help you protect you environment - But, if you are running WebFOCUS 7x or lower and it can be accessed from the INTERNET, be sure you disable the use of IBIF_adhocfex and/or at least Operating System Level Commands. If you have both enabled you could be vulnerable to unauthorized access to your system.

June 08, 2015, 05:17 AM

pradhan_dp

Let me be the noob to ask - how do you disable the Operating System Level commands?

WebFOCUS 7.6.1
Windows, HTML,PDF,EXCEL2000

June 08, 2015, 05:49 AM

TexasStingray

See this post to disable operating system level commands.
http://forums.informationbuild...671009331#9671009331

Scott

June 08, 2015, 06:49 AM

TexasStingray

On another note: If you think you are safe and want someone to try some basic testing just send me an PM and we can arrange it. I will need an offical request on company letter head. The test will be very basic only to see if you are Vulnerable.

Scott