Announcing General Availability of Web Help Desk v12.5.2

We are excited to share, that we've reached GA for Web Help Desk​v12.5.2

This service release includes:

Clickjacking protection

This release prevents malicious code from redirecting a hyperlink in the Web Help Desk user interface to an unauthorized third-party website or resource.

Secure password reset logic

After you click Forgot Password on the Log In screen, Web Help Desk verifies your current email address and redirects you back to the application using a secure connection to reset your password.

Improved LDAP security

Web Help Desk now prevents unauthorized LDAP client account users from logging in to an LDAP tech account with an identical user name. In v12.5.1 and earlier, WHD had 2 ways to handle LDAP authentication. One for techs and one for clients. After you install this release, the tech LDAP authentication functionality is removed, and every tech, who used this functionality will have his WHD password reset, and will also receive an email with steps to log in to WHD.

See Unauthorized clients can log in to a Tech account using LDAP authentication for details.

Before you install this upgrade, ensure that all techs have client accounts (authenticated through LDAP) linked to their tech accounts. Also ensure, that the tech username is not the same as any of the client's usernames. After the upgrade, all techs must access their tech account through their client account, or using the WHD tech username and WHD password (which can be reset using the secure password reset logic).

Updated Apache Tomcat

This release supports ApacheRegistered TomcatRegistered 7.0.82 for improved security. See the Apache Tomcat website for details.

Notabe fixed issues

Tickets linked to a survey now close properly after you change the status to Resolved.

The Office 365 connector now supports subfolders.

Tickets restricted to a location group can no longer be accessed by users in another location group.

We encourage all customers to upgrade to this latest release which is available within your customer portal.

Thank you!

SolarWinds Team

Parents
  • Ok, it makes sense. My only thought would be why not mention that at the beginning.  This update is just at a week old and it took you just as long to post your comment.  Look, I really want this product to continue.  As you can see there are folks here that feel the same way.  Just be upfront and honest at the beginning.  We've been waiting too long in between updates with minimal fixes or enhancements and this just looked like another one of those minimal fixes.  When I see an update with no enhancements and only fixes, I want to pull my hair out.  Just be upfront with your customer base.  Not sure if we will be patient too much longer, but I'm sure some of us would understand.

Comment
  • Ok, it makes sense. My only thought would be why not mention that at the beginning.  This update is just at a week old and it took you just as long to post your comment.  Look, I really want this product to continue.  As you can see there are folks here that feel the same way.  Just be upfront and honest at the beginning.  We've been waiting too long in between updates with minimal fixes or enhancements and this just looked like another one of those minimal fixes.  When I see an update with no enhancements and only fixes, I want to pull my hair out.  Just be upfront with your customer base.  Not sure if we will be patient too much longer, but I'm sure some of us would understand.

Children
No Data
Thwack - Symbolize TM, R, and C