A critical security patch is available. It is resolving a static token vulnerability issue.
This vulnerability is not known to be exploited. However, we strongly recommend that you update your production version soon as possible.
Please find below the list of hotfixes (HF) and cumulative updates (CU) available:
- HF 25 and higher HF HOPEX V5.0 CP5
- HF 33 and higher HF on HOPEX V5.0 CP6
- HF 16 and higher HF on HOPEX V5.0 CP7
- HF 11 and higher HF on HOPEX V5.0 CP8
- CU 07 and higher CU on Aquila HOPEX V6.0 SP1
- CU 06 and higher CU on Aquila HOPEX V6.0 SP2
These HF/CU also enable to get other important fixes. Please read associated Release Notes available on MEGA Community in HOPEX release notes site for more details.
The error is of course fixed in the coming versions:
- HOPEX V5.0 CP9
- HOPEX Aquila V6.1
Platforms of customers hosted on MEGA Saas (cloud services) will be contacted to schedule the most appropriate timeframe for the update.
This message is part of our ongoing commitment to ensure the security and reliability of our services.
