Whispir Forums

Community Support

RSS Feed

Whispir Security Advisement - OpenSSL Heartbleed bug - UPDATE

  1. 14/04/2014 - Updated to add the certificate download

    On 7 April 2014, a flaw called the Heartbleed bug in the OpenSSL cryptographic software library was disclosed impacting versions 1.0.1 and greater. OpenSSL is widely used to secure Web communications http://heartbleed.com.

    Whispir Platform Users:

    Whispir scanned all its environments as a result of the Red Hat security advice provided on the 7th April 2014 and we can confirm that no Whispir Platform production environments were affected by this OpenSSL bug.

    The following instructions relate to Whispir API users only.

    Whispir API Users

    Whispir has been working with its API proxy infrastructure partner Mashery, who have confirmed patching the OpenSSL flaw on the 9th April 2014. As there is no log information associated with this exploit that allows Whispir to determine whether any account credentials were compromised, Whispir is taking the following action;

    1. Whispir is updating its api.whispir.com certificate at 12 noon Monday 14 April 2014.

      You will need to install this certificate within your environment only if you have previously installed the SSL certificate (optional) on any of your servers.

      The certificate is available to download from: https://developer.whispir.com/files/Whispir_Certificates_14-04-2014.zip

    2. Whispir recommends you reset your Whispir password.

      This can be done by logging in and clicking the profile icon in the top right of the screen and selecting Change Password.

      Alternatively, you can go to au.whispir.com, nz.whispir.com or ap.whispir.com (Australia, New Zealand or Asia Pacific respectively), and click the "Need help signing in?" link and follow the instructions to receive a one time password link for password reset.

      Whispir Password Reset

    If you have any further questions about Heartbleed or any of the information in the message above, please don't hesitate to contact us at support@whispir.com.

    Regards

    Whispir Support

    Message edited by Jordan Walsh 3 years ago

[ Page 1 of 1 ]

This topic is locked and new posts are not allowed