About jschier

jschier · ‎Sep 23, 2021

We detected some vulnerabilities in FNP 11.18.2.0 and we want to know for each of them if the lmadmin is affected from that vulnerabilities and if yes, if there is any mitigation. openssl v1.1.1k: - CVE-2021-3711 (9.8 CVSS v3) - CVE-2021-3712 (7.4 CVSS v3) apache portable runtime (apr) v1.6.5: - CVE-2021-35940 (7.1 CVSS v3) apache httpd v2.4.48: - CVE-2021-33193 (7.5 CVSS v3) - CVE-2021-32785 (7.5 CVSS v3) - CVE-2021-32786 (6.1 CVSS v3) - CVE-2021-32792 (6.1 CVSS v3) - CVE-2021-32791 (5.9 CVSS v3) Thanks in advance!

jschier · ‎Sep 21, 2021

In FNP V11.17.2.0 32-bit we receive the minor error 25008 in combination with major error 50041. The explanation for the major error 50041 we could find in the documentation but nothing about the minor error. Could you please explain what it means?

jschier · ‎Nov 04, 2020

I'm glad to read your consideration for updating gsoap and hope that this enhancement will come soon. Because the current used version has the vulnerability CVE-2019-7659 rated with an CVSS 3.0 scoring of 8.1 which is HIGH.

jschier · ‎Nov 04, 2020

Which exact version of gsoap is used in the FNPCommsSoap included in the FlexNet Publisher 11.17.2.0 Toolkit ?

jschier · ‎Oct 19, 2020

We detected the critical CVE-2020-11984 (CVSS v3 rating 9.8 => CRITICAL) in FNP 11.17.1.0 and also included in prior FNP versions that using Apache 2.4.43. Will this critical vulnerability be fixed in the upcoming FNP 11.17.2.0 release?

jschier · ‎Jul 27, 2020

In our TS event log file there is an entry like that: EventCode: 40000012, Message: Transient break. Timezone=+2 Validator=2 TrustedId=1 1=0 2=0 3=0 4=0 5=0 6=0 7=0 17=0 What does it mean? Is this documented somewhere in more detail?

jschier · ‎Dec 10, 2019

flxActCommonHandleGetError returns Minor Error 41196. What does this code mean?

jschier · ‎Nov 12, 2019

Login at the administration part of the lmadmin web user interface requires entering user name and password. This can be the name of a Microsoft Windows Active Directory domain user. lmadmin contacts the Active Directory domain server to validate this name along with its password. It is possible to use single sign-on here without the need to enter the credentials manually?

jschier · ‎Nov 04, 2019

According to the FlexNet Publisher 2019 R2 Development Environment Guide we want to test the trusted configuration. On page 21 there is described how to change the 8 seeds in the <vendor>TrustedConfigIn.xml. We are using FNO and it's not clear which seeds to use here. Are the seeds the same as the FNO's transaction key seeds or where do they come from?

jschier · ‎Oct 08, 2019

Are there known cases in which the call of lc_feat_list in a 64-bit software can take several minutes when no license servers are defined?

Online Status	Offline
Date Last Visited	‎Sep 30, 2021 03:13 AM

Vulnerabilities (critical, high, medium) detected in FNP 11.18.2.0

What means minor error 25008 in combination with major error 50041?

Re: Which gsoap Version is used in FNP 11.17.2 ?

Which gsoap Version is used in FNP 11.17.2 ?

CVE-2020-11984 detected in FNP 11.17.1.0

What means "Transient break" in TS event log file?

flxActCommonHandleGetError returns Minor Error 41196

Can single sign-on be used for administration login at lmadmin web user interface?

Which seeds are needed in trusted configuration

Known cases where call of lc_feat_list takes several minutes?