E-mergo support: no worries about vulnerabilities

In today's fast-changing digital world, no one can escape it: vulnerabilities in the software you use. All software companies are constantly innovating, and a mistake is easily made. Once a leak has been found and published, a race against the clock begins, because as soon as you know about it, criminal hackers do too, so you have to make sure the leak is closed. Last September there was such a leak, classified as “Critical”, which affected all client-managed versions of Qlik. In this blog, Senior Consultant Lennaert van den Brink tells you more about how our support department handled it.

Publication usually happens via the vulnerability database of the American National Institute of Standards and Technology (NIST). In this database the vulnerability is created and given a so-called CVE (Common Vulnerabilities and Exposures) number. Using that number you can look up how severe the vulnerability is, how likely it is to be actively exploited and which software is affected by it.

CVE notification Qlik

Last September there was such a CVE, classified as “Critical”, which affected all client-managed versions of Qlik: CVE-2023-41265. The E-mergo support team immediately took action: all customers with a support contract were informed of the vulnerability. An upgrade of their systems was then scheduled with them.

Normally that would be the end of it, but in this case the operation had a sequel. The patch that was supposed to fix the problem turned out not to close the leak completely, which led to a new CVE: CVE-2023-48365. Because the E-mergo support team keeps a close eye on vulnerabilities, it was able to switch quickly, and these customers were still provided with the right solution.

For readers of this blog who do not (yet) have support from E-mergo: if you are on one of the versions below, make sure you upgrade as soon as possible to at least the most recent patch for that version. The affected versions are:

• August 2023 Patch 1
• May 2023 Patch 5
• February 2023 Patch 9
• November 2022 Patch 11
• August 2022 Patch 13
• May 2022 Patch 15
• February 2022 Patch 14
• November 2021 Patch 16

Need help?

Do you need help carrying out the upgrade, or would you also like to place your environment with E-mergo support? Then get in touch via the button below. Or schedule an appointment with us right away!