Aware IM User Forums

This is a vast improvement!

like slack

The Xmas gift that just keeps giving !!

https://nvd.nist.gov/vuln/detail/CVE-2021-44832

As the fun never stops at just one vulnerability, a second has been found with Log4J.

2.16.0 is now the recommendation.

https://cve.mitre.org/cgi-bin/cvename.c ... 2021-45046

Gee, performance must be terrible! I would at least do this. <snip> AWAREIM_SERVER_STARTUP=..\\JDK\\bin\\java -Xmx4096m -Xms4096m -classpath ../lib/*;../CustomJars/* com.bas.newcp.ServerStarterECP TOMCAT_STARTUP=..\\JDK\\bin\\java -Xmx2048m -Xms2048m -Djava.endorsed.dirs\=../Tomcat/endorsed -classpa...

try startupoptions.props.

How much memory do you have allocated to the AIM server and Tomcat?

Well here's my train of thought. If its a single box for everything and you are running the config tool remotely... Why not use a reverse proxy to do the normal security thing, then use a VPN to run the rest of the stuff. <Internet> -> 443 (Bidirectional) -> [Instance] <Internet for Config Tool> -> ...

Fujitsu ScanSnap S1500?

Just to confirm, plugin's that were written prior to v8.6 will also need to rewritten not to look up tools.jar as dependencies too?

You called?

All sorted , was an unconfigured engine and some privileges that needed work.

Like most things in security, its all about layers (much like a onion). Example could be.. a few months back (i believe last year) there was a CVE released for Tomcat AJP which allowed for a exploit which you could access files. (https://www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-...

Why upgrade Java? That like asking , why apply Windows security patches? There's an element of 'breakage' when moving away from the default JDK that is supplied with AwareIM. To be completely honest most of the time its just fine, however i've had an issue or two here and there around libraries and...

- Anyone doing "licensing" etc. for plugins? I did bring this up at a conference previously. I think it would be good for developers who have made plugin's to have a mechanism where we could use AwareIM's mac address validation or some other mechanism to either allow or disallow a particular plugin ...

Textual.