BlueMind 4.5.x-5.0.x security vulnerability: how to proceed

BlueMind - EN Announcement
1

A major security vulnerability affects all versions of BlueMind, from 4.5.x to 5.0, i.e. :

  • 4.5.x
  • 4.6.x
  • 4.7.x
  • 4.8.x
  • 4.9.x
  • 5.0.x

This vulnerability has been corrected in the latest releases (4.9.19 and 5.0.3). In the absence of an update, it is possible to correct the vulnerability by applying a patch and restarting the core.

It is imperative to perform these operations as soon as possible.

Fixing the vulnerability

Procedure for versions 4.5 to 5.0

Download the jar corresponding to your version and save it on the server concerned (bm-core) in the “/root” directory.

Run the script corresponding to your version

Save the script in the “/root” directory on the same server and run it as root.

Planned or future updates

Only BlueMind versions >= 4.9.19 and >= 5.0.3 have the patch integrated: if you update to another version, you’ll need to re-apply this same procedure.