Table of Contents

Ahsay Security Advisory (#26030) - Critical Vulnerability in AhsayCBS v7 and AhsayCBS v8

We have recently uncovered a critical vulnerability in the AhsayCBS API (Application Programming Interface) system, which exposes some versions of AhsayCBS v7 and AhsayCBS v8 to a very high risk of malicious attack and loss of data.

The vulnerability could potentially allow a malicious attacker to:

What are the affected AhsayCBS versions?

Does it affect my AhsayOBM/AhsayACB v7 and v8 clients?

The vulnerabilities only affect AhsayCBS v7 and AhsayCBS v8 servers, it does not affect the AhsayOBM/AhsayACB v7 and v8 clients, and therefore no action is required for AhsayOBM/AhsayACB clients.

However, we do recommend partners consider upgrading AhsayOBM/AhsayACB clients to the latest versions to take advantage of the latest available bug fixes and enhancements.

What action do I need to take to fix this problem?

All affected partners:

Please make sure you have valid maintenance before upgrading to the latest release. Otherwise, your AhsayCBS service will stop functioning due to “Support Expired” error. Please contact a member our Sales team sales-kb@ahsay.com for assistance with maintenance related issues.

1. For partners currently on AhsayCBS v7

i. If your current version is NOT AhsayCBS v7.17.2.2 or above.

  • Please refer to this KB articles for upgrade instructions to upgrade to v7.17.2.2:
  • Apply the latest hotfix v7.17.2.119 or above. Please refer to instructions on our Partner Portal here. (Note: a valid partner portal login is required.)

ii. If your current version is AhsayCBS v7.17.2.2 or above.

  • Apply the latest hotfix v7.17.2.119 or above. Please refer to instructions on our Partner Portal here. (Note: a valid partner portal login is required.)

2. For partners currently on AhsayCBS v8

If your current version is NOT AhsayCBS v8.3.2.11 or above, please refer to the following KB article for upgrade instructions:

What if my maintenance has already expired? How do I upgrade?

Stop! Do not upgrade until you contact a member our Sales Team at sales-kb@ahsay.com for assistance with your maintenance renewal.

What if I require assistance with my AhsayCBS server upgrade?

Our professional service team is ready to provide immediate assistance to partners with AhsayCBS v7 and AhsayCBS v8 upgrades.

Please contact a member our Sales Team at sales-kb@ahsay.com to obtain a quotation for the AhsayCBS upgrade service.