Strategy has thoroughly reviewed the products under its Analytics and Mobile platforms and has determined that none of these products are affected by the CVE-2014-0160 vulnerability (also known as “Heartbleed”) in the OpenSSL Library. However, Strategy Intelligence Server provides an option to encrypt communications between Strategy Intelligence Server and Strategy Web/Mobile Server and/or Strategy Desktop via SSL since version 9.3.0. If users are running Strategy Intelligence Server on a UNIX/Linux system and have elected to use this facility, the OpenSSL library installed with the underlying Operating System could be used. Strategy advises customers to check with the Operating System vendor to determine what steps, if any, are required to mitigate this vulnerability. Strategy would also like to remind customers that although its products were found not to be affected by the Heartbleed vulnerability, customers should also ensure that other products deployed in conjunction with Strategy products are not susceptible to this vulnerability by reviewing the respective vendor recommendations.
Third Party Software Installation WARNING
The third-party product(s) discussed in this technical note is manufactured by vendors independent of Strategy. Strategy makes no warranty, express, implied or otherwise, regarding this product, including its performance or reliability.
