Heartbleed Update: SaaS Customers Required to Change Passwords

Replicon Customers Are Not Affected By The Heartbleed Bug

About two weeks ago, independent research teams identified a vulnerability in OpenSSL― the technology that powers encryption across much of the Internet. The news of this vulnerability, popularly referred to as the “Heartbleed bug,” has spread rapidly from tech blogs to the mainstream media.

Akamai, our Content Delivery Network provider, assured us last week that Replicon was not affected by this vulnerability. We learned today, however, that an independent security researcher contacted Akamai this past weekend about defects in the software they used to protect their SSL keys. A bug, in fact, was present, and neither the data nor the keys were fully protected.

Since Replicon uses Akamai services for edge caching and application acceleration for our Cloud platform, this may have exposed Replicon user names and passwords from August 2012 through April 4, 2014. Consequently, we are in the process of updating our certificates within the next 24 hours to eliminate any exposure to the Heartbleed bug.

For customers using SAML (for Single Sign-On), exposure to the bug would be dependent on their organization’s use of affected versions of OpenSSL and their SAML provider.

Replicon will be forcing a password change at the application level once the certificates are updated. At that time, end users will see a prompt to change their password on the log in page.

Read more details from Akamai here: https://blogs.akamai.com/2014/04/heartbleed-update-v3.html

The integrity and safety of our customers’ data is paramount. We are reacting quickly to address and resolve the issue. Customers with queries can contact our Technical Support Team at 1-877-662-2519 (North America) and +800 6622 5192 (Outside North America).

Avatar
ABOUT THE AUTHOR
Replicon
Replicon provides award-winning products that make it easy to manage your workforce. With complete solution sets for client billing, project costing, and time and attendance management, Replicon enables the capture, administration, and optimization of your most underutilized and important asset: time.
Get started today.
Set up a free trial based on your business needs. Start Free Trial

Make Time and Attendance Part Of Your Digital Transformation

TLNT | October 10, 2019 By Raj Narayanaswamy, Co-founder and co-CEO at Replicon Many businesses embarking on a payroll and HR transformation journey can easily get caught up in the…Read More

Global Compliance Desk – Australia

Recent Federal Court Decision: Accrual of Personal/Carer’s Leave Most employers in Australia follow the practice of calculating personal/carer's leave entitlements in hours. On 21 August 2019, the Federal Court of…Read More

Project management, all grown up

accountingToday | September 17, 2019 By Scott Bales Vice president, Enterprise Solution Engineering and Delivery, Replicon One might assume they already know everything a project manager in a professional services…Read More

The five reasons employees work overtime

Very few people enjoy working overtime, and even fewer companies want their employees stretching their hours. Besides the costs of paying overtime (and a few extra costs), research has shown…Read More

The 7 must-haves for choosing the right professional services management solution

Not too long ago, if you asked any professional services organization to tell you how they managed client projects, resources and utilization rates, the answer was always the same: spreadsheets.…Read More

Seven critical ways to achieve global project success

There was once a time when managing a project at work was fairly straightforward. Everyone was in the same location, or at most a mere phone call away. You’d set…Read More
  • Cloud
  • In The News
  • Corporate
  • Professional Services Management
  • Project and Program Management
  • Shared Services Management
  • Time and Attendance Management
  • Workforce Management
  • Customer Feature
  • Feature Update
  • Time Intelligence
  • Industry News
  • Webinar Recap
  • Global Compliance Updates
  • Chat with us
    How can we help you?