As you may have read in the news, there are currently serious vulnerabilities in PHP, a widely used programming language for web applications. Although we are phasing out PHP, we still use it in a few essential parts of our web applications.
As a precaution, we will restrict access to our panels to known IP addresses. This applies to the Provider Panel, the Company Panel and the UC Panel, and therefore also to Webcalls.
In doing so, we are following the advice of CERT-EU to shield internet-facing web applications until a fix is available. Many other organizations are taking similar measures.
We are currently working on the implementation. As soon as the measure is active, we will announce it on our status page.
Who keeps access?
IP addresses from which there has been an active session on one of the panels in the past 7 days.
IP addresses on which a device is registered.
The panels will not be reachable from any other IP address. In that case, you may also be unable to change settings.
Following the serious vulnerabilities in PHP, which you may have seen in the news, we previously restricted access to our panels to known IP addresses. We did this on the advice of CERT-EU.
As soon as the patched PHP version is released, we will test it in our test and acceptance environments. We will do this as quickly as possible. If everything works as expected, we will roll out the update to production.
What will you notice?
While we update the production environment, the panels and Webcalls may be briefly unavailable. No other services are affected, including desk phones and the Qaller app. The access restriction we put in place earlier remains in effect until further notice.
We will keep you updated on this status page and let you know as soon as the update is complete.
Investigating: We have reports of a problem and are currently investigating.
Identified: We have identified the issue and are currently working on a fix.
Watching: We have executed a fix and are currently monitoring the situation.
Resolved: The fix was successful. The incident is resolved and closed.