Skip to main content

NGINX Vulnerabilities

Updated

Summary

The Adaptiva Server component includes open-source nginx which provides web services for the Adaptiva OneSite Admin Portal. Adaptiva strives to include the latest versions of open-source software when we release our latest builds. Open-source software changes that include improvements or vulnerability resolution of detected issues sometimes occur between Adaptiva build releases.

If your Security team reports that nginx on the Adaptiva Server has a vulnerability, see the solutions below.

Note

This article only applies to Adaptiva builds 8.0 through 9.1.

Solution

Check your Adaptiva Server Version

  1. Navigate to the Adaptiva Support Portal Product Releases page, and then select the Adaptiva Cumulative Release Notes link. The currently released Adaptiva version appears on this page.

  2. Determine which version of the Adaptiva Server you are using by logging into the Adaptiva OneSite Admin Portal, and then select 3412_spr.png > Settings > About Adaptiva Server.

  3. If using the latest version, skip to the Alternative Solution or wait for the next release.

    Note

    The latest version of nginx included with the latest release also appears in the Cumulative Release Notes. If this Adaptiva OneSite Platform version does not meet the requirements upgrade provided by the security team, continue to the Alternate Solution.

Alternative Solution

Important

If you reinstall/upgrade any of the products after completing these steps, repeat these instructions to reapply the latest version of nginx.

Download and Rename the Vendor Files

  1. Navigate to the nginx: download page to download the latest version of nginx. Make sure to download the Stable version.

  2. Save the zip file to the Downloads folder, and then extract (unzip) the files to a folder in that location.

  3. Stop the Adaptiva Server service.

  4. Rename the nginx-html folder using the following steps:

    1. Go to the following folder path:

      %AdaptivaServer%\cloud-ui

    2. Rename the nginx-html folder to nginx-html-old.

  5. Create a new folder named nginx-html in the cloud-ui folder.

Update NGINX

  1. Copy the contents of the downloaded folder into the nginx-html folder. The contents of the new folder should resemble the contents of the old folder.

  2. Update the NGINX folders and downloaded contents using the following steps:

    1. In the nginx-html folder, delete the html folder, and then copy the nginx-html-old\html folder to the nginx-html folder.

    2. Copy the nginx-html-old\conf\nginx.conf file to the nginx-html\conf folder, and then select Yes to overwrite the file.

    3. Rename the nginx-html\nginx.exe file to nginx-html\nginx-Adaptiva.exe.

    4. Create a backup of the nginx-html-old folder, and then remove it from the cloud-ui folder.

  3. Start the Adaptiva Server service, and then wait for the web services to start up. The nginx-Adaptiva.exe file appears in the Details tab on the Task Manager.

  4. Open the web user interface (UI), and then press the CTRL+SHIFT+R keys to flush the browser cache.

Verify the NGINX Version on the Adaptiva Server

  1. Open a command prompt.

  2. Run the following command to verify the NGINX version:

    "%AdaptivaServer%\cloud-ui\nginx-html\nginx-Adaptiva.exe" -v

    The following results should resemble the version you downloaded:

    nginx version: nginx/1.26.3

Related to

Related articles