ISPsystem, the developer of the VMmanager server virtualization platform, confirms a security incident involving a vulnerability in one of the VMmanager 6 builds.
The situation remains challenging but under control. ISPsystem is taking all necessary measures to address the vulnerability, mitigate the impact of the incident, and minimize risks for customers.
We are aware of a security incident involving a vulnerability in one of the VMmanager builds. We are investigating the incident and maintaining close contact with our customers.
As the incident involves the security of specific customer infrastructures running the platform in publicly accessible environments, we are not disclosing the names or number of affected operators or details of how access may have been gained. This is standard security practice, as disclosing such information before all customers have completed the necessary updates could expose them to additional risks.
We are taking all necessary steps to address the root cause of the incident and mitigate its impact. The investigation is ongoing, and our technical support team is assisting customers with their individual installations.
While the incident is being investigated, all VMmanager installations must implement the following security measures:
- Configure infrastructure firewalls to block both inbound and outbound connections to the VMmanager platform and virtualization nodes, allowing access only to trusted administrators and ISPsystem technical support.
- Restrict SSH access to the management platform and virtualization nodes to trusted IP addresses only.
We continue to investigate the incident and will issue further recommendations as they become available. Relevant updates will be published for all affected versions.
We remain in close contact with our customers and urge anyone with the slightest suspicion that their environment may have been affected to contact the vendor’s technical support team immediately.
