SFTPPlus not vulnerable to Terrapin
SFTPPlus is not vulnerable to the recent SSH / SFTP Terrapin attack.
Continue reading
Articles sorted by tag security
This is a subset of our news articles, filtered by tag.
SFTPPlus is not affected by the OpenSSL 3.0.x security vulnerabilities
SFTPPlus is not using the OpenSSL 3.0.x libraries yet and is not affected by security vulnerabilities specific to these versions.
Continue reading
SFTPPlus Release 4.23.0
We are announcing the latest release of SFTPPlus, version 4.23.0 with improved Azure AD authentication, installers on Linux and macOS, and added XSS protection on Activity log page.
Continue reading
SFTPPlus Release 4.22.0
We are announcing the latest release of SFTPPlus, version 4.22.0 with support for Azure AD, updated UI and a security change in the way source IP are allowed.
Continue reading
SFTPPlus Release 4.16.0
We are announcing the latest release of SFTPPlus, version 4.16.0.
Continue reading
SFTPPlus is not affected by log4j security vulnerabilities
SFTPPlus is not using the log4j library and is not affected by any security vulnerabilities related to log4j.
Continue reading
SFTPPlus Release 3.55.0
We are announcing the latest release of SFTPPlus version 3.55.0.
Continue reading
Restrict user with trusted IPs for SFTP and FTPS
It is common practice to secure a file transfer server using firewall rules which only allow incoming connections from trusted partners.
Continue reading
SFTPPlus Release 3.39.0
We are announcing the latest release of SFTPPlus version 3.39.0.
Continue reading
Secure cipher suites for the ssl_cipher_list configuration
With the release of SFTPPlus 3.32.0, we have changed the default set of SSL cipher suites for the Local Manager and the HTTPS service. As with any product that runs in many environments, SFTPPlus uses a default set of SSL- related parameters that are a compromise between security and compatibility. Up to SFTPPlus version 3.31.0, we were using this highly compatible, but still reasonably secure, default set:
Continue reading