AD360 build 4235 released! Fixes critical security vulnerabilities

Hey there!

We are pleased to announce that the latest build of AD360, 4235, is out and it fixes important security issues reported through our bug bounty program.

Issues Fixed:

Fixed the account takeover issue reported by HaYiCle, by enforcing SAML signature verification before logging in users through SAML SSO (CVE-2021-37927).

Fixed the Post-Auth OS command injection issue that occurs while configuring database backup in an external location. It was reported by Thai Nguyen (CVE-2021-37925).

How to update?

Update using the service pack.

New to AD360?

Download the fully functional 60-day free trial now.

Got feedback? We would love to hear what you think about this release. Share your feedback in the comments section below.

Regards,

AD360 Team

Toll Free: +1-888-720-9500

Direct: +1-408-916-9890

ad360-support@manageengine.com