- SS&C Blue Prism Community
- Get Creative
- Product Ideas
- Communications Word AddIn - Security Vulnerability...
- Subscribe to RSS Feed
- Mark as New
- Mark as Read
- Bookmark
- Subscribe
- Email to a Friend
- Printer Friendly Page
- Report Inappropriate Content
- Subscribe to RSS Feed
- Mark as New
- Mark as Read
- Bookmark
- Subscribe
- Email to a Friend
- Printer Friendly Page
- Report Inappropriate Content
No Customer Care of JIRA ticket has been opened.
The ask by Morgan Stanley is to have SS&C update Communications to use a 3rd party certificate instead of the self-signed certificate.
The Morgan Stanley CISO team believes this is a security risk and should be remediated by SS&C with either a short-term solution if we can't provide a long-term solution this year. The short-term solution could be to rotate the certificate in the SS&C Hosted environment by November 2022.
Risk - Self-signed certificates introduce a risk of server impersonation attack.
Remediation - Vendor must ensure that the certificate used for authentication is not self-signed and is actually signed by a Trusted third party Certificate Authority.
Risk- Not rotating the certificates introduces the risk of certificate keys becoming “stale” and increases the likelihood that they will be compromised or increasing the period for which compromised credentials are valid.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
- New 889
- Duplicate 76
- Needs More Info 52
- Reviewed 223
- Under Consideration 151
- Not Planned 107
- Planned 53
- Planned-Later 22
- Planned-Next 3
- Planned-Now 10
- Delivered 156
