PHP vulnerabilities: Update for Enate customers
An update on the latest news surrounding PHP vulnerabilities. Enate’s platform and website are not affected.
Over the past few days, news outlets around the world have reported on two critical vulnerabilities in PHP, commonly referred to as PHP2Shell.
We’re publishing this update so our customers know where Enate stands.
PHP is a programming language that many of the world’s websites rely on to run. It gathers the information a page needs and presents it in your browser. Security researchers have recently found two serious vulnerabilities in PHP.
Our technical security team has assessed Enate’s platform and website, and confirmed neither is affected by these vulnerabilities.
Therefore, you do not need to take any action in relation to either.
As a SOC2 and ISO 27001 certified business, we assess new security vulnerabilities as they’re disclosed.
Like most software companies, we use third-party providers for some of the services that support how we operate. As a precaution, we’re contacting each relevant provider to confirm whether they’ve been affected and, where they have, that they’ve fixed the issue.
We’ll post an update here once our checks with those providers are complete.
.avif)
