Security Improvements in AOS 6.95
Keeping your data safe is at the heart of what we do. Today, we're rolling out AOS 6.95, a firmware update that strengthens security in EMA by addressing two findings reported to us.
We have no evidence these findings have affected any customer environments. Still, because your peace of mind matters to us, we're automatically delivering this update to all EMA installations right away - faster than our usual process of manual updates followed by automatic ones after a month.
Most customers are already protected and you can easily check whether AOS 6.95 is already installed. As an administrator, open the Information > Firmware tab in the EMA web interface. If AOS 6.95 is not installed yet, you can trigger the installation by clicking "Check for Updates."
These findings apply only under highly specific conditions. A user would need to be logged into EMA while an external party would need to know the exact EMA hostname or IP address. Furthermore, this would only be relevant during an active session that hasn't timed out due to inactivity. These layers make any concern highly unlikely, but we're committed to addressing every possibility with care.
Fixed Issues
This update addresses two specific security findings:
We've enhanced cookie protection by implementing intelligent session cookie handling with SameSite attributes. This security improvement automatically configures the appropriate SameSite attribute. Systems using the EMA Smart Link feature maintain a compatibility mode to ensure existing integrations with line-of-business applications do not break. If you experience any issues with your specific setup, please contact customer support.
Additionally, we have improved parameter validation when performing bulk actions in search results.
Our Security Commitment
We value the contributions of security researchers who help identify potential improvements in our products. Security is not a destination but a journey, and we remain committed to that journey together with our customers.
If you have any questions or concerns about this update, please don't hesitate to support.
Our Promise for the Future: Reliability and Innovation!
EMA continues to revolutionize the use of business-critical information as an archive and global search engine for corporate data. With the latest updates to our AOS firmware for EMA, we continue to support our customers in their digital transformation. For nearly three decades, our solutions have been built on advanced technology and the highest quality standards.
We understand the importance of secure and efficient data management. With EMA, we not only facilitate data archiving, but also provide secure and controlled access to your data anytime, anywhere.
