Mambu security vulnerability in UI

Incident Report for Security Notifications

Resolved

Please note that Mambu has released a fix to production. This security fix for ISEIM-24862 is patched in v9.111.5.

Should you have any further concerns, please contact us via support@mambu.com.

Posted Dec 08, 2021 - 11:01 UTC

Update

Please be informed that the fix has been validated and released in production. Cloud agnostic production release is in progress.

Posted Dec 03, 2021 - 07:35 UTC

Update

Please be informed that the fix has been validated and released in sandbox with production release planned for today.

Posted Nov 30, 2021 - 10:11 UTC

Monitoring

Fix is validated, and will be released as soon as possible.

Posted Nov 25, 2021 - 15:37 UTC

Update

Please note Mambu is validating the fix right now and will release it as soon as possible - ISEIM-24862, security vulnerability in UI.

Should you have any further concerns, please contact us via support@mambu.com.

Posted Nov 25, 2021 - 15:36 UTC

Identified

Please note Mambu has run into a security vulnerability in UI, ISEIM-24862, which has CVSS score 10.

We are currently working on a fix. Once the issue is fixed and deployed it will be included in the release notes and a follow-up announcement.

If you require more information, please contact us via support@mambu.com.

Posted Nov 24, 2021 - 07:19 UTC