|
RE: Unresolved security problem
A quick update. After discussions with Paul T and the original reporter a solution is on it's way.
It seems to me that this has highlighted a problem. If somebody makes the effort to report a security vulnerability in webERP then that person deserves more respect than to be ignored for weeks. It got embarrassing as the only contact he was getting was through me as the admins were ignoring him. He could have gone public with this vulnerability (less scrupulous security consultants would have done) but he has waited till we get a solution out there.
The current procedures clearly didn't work in this instance, perhaps they need looking at?
Tim
|
