We have recently uncovered a critical vulnerability in the AhsayCBS API (Application Programming Interface) system, which exposes some versions of AhsayCBS v7 and AhsayCBS v8 to a very high risk of malicious attack and loss of data.

The vulnerability could potentially allow a malicious attacker to:

• Gain access the file system and all backup files on the AhsayCBS server
• Obtain a list of directories and files on the AhsayCBS server
• Delete files on the AhsayCBS server
• Download files from the AhsayCBS server

• AhsayCBS pre-v7.17.2.97
• AhsayCBS v8.1.0.24 to v8.1.1.x
• AhsayCBS v8.3.0.30 to 8.3.0.104

The vulnerabilities only affect AhsayCBS v7 and AhsayCBS v8 servers, it does not affect the AhsayOBM/AhsayACB v7 and v8 clients, and therefore no action is required for AhsayOBM/AhsayACB clients.

However, we do recommend partners consider upgrading AhsayOBM/AhsayACB clients to the latest versions to take advantage of the latest available bug fixes and enhancements.

All affected partners:

• On AhsayCBS v7 are strongly advised to upgrade to the latest version of v7, AhsayCBS v7.17.2.119 or above to fix the critical vulnerability.
• On AhsayCBS v8 are strongly advised to upgrade to the latest version of v8, AhsayCBS v8.3.2.11 or above to fix the critical vulnerability.

Stop! Do not upgrade until you contact a member our Sales Team at sales-kb@ahsay.com for assistance with your maintenance renewal.

Our professional service team is ready to provide immediate assistance to partners with AhsayCBS v7 and AhsayCBS v8 upgrades.

Please contact a member our Sales Team at sales-kb@ahsay.com to obtain a quotation for the AhsayCBS upgrade service.