The information on the latest update
In this security bulletin, we bring you information on new security-related developments at Sitecore.
We are reporting Critical vulnerability (SC2019-001-302938), for which there is a fix available.
We encourage Sitecore customers and partners to familiarize themselves with the information below and apply the fix to all Sitecore systems.
If you want to receive notifications about new Security Bulletins on the Sitecore Knowledge Base, subscribe to security updates.
To help customers and partners understand the severity of potential security vulnerabilities, Sitecore uses the following definitions to report security issues:
KB0608800
Versions affected
Vulnerability SC2019-001-302938 affects the following versions:
Vulnerability is applicable to all Sitecore systems running affected versions. This includes CMS-only and xDB-enabled modes, single-instance and multi-instance environments, Managed Cloud environments, and all Sitecore server roles (content delivery, content editing, reporting, processing, publishing, and so on), which are exposed to the internet and have the pages under the /sitecore/admin path accessible to Sitecore users.
A hotfix/patch is available for all affected Sitecore XP versions.
Versions not affected
To resolve the issue, consider one of the following options:
Note: refer to the readme.html file inside the archive for installation instructions.