Security notice – SP web services (mySP / spwebreg)
Our SP web services mySP and spwebreg currently run on PHP versions affected by recently disclosed PHP security vulnerabilities.
What you should do depends on how your service is reachable:
- Accessible from the internet: please take it offline as soon as possible.
- Accessible only from your local network: the risk is considerably lower, and you may choose to keep it running.
We are currently investigating remediation options and will follow up as soon as we have a solution.
Not affected: all other SP-TID systems: SPlogin, d5dialog and terminals — do not use PHP and can continue running without any action on your part.
Please follow current status here: https://timereg.download/phpstatus.pdf