An external security review, and what we fixed

CerimoniereWeb holds a registry of dignitaries, confidential contact details and seating arrangements. That is sensitive information. In August we had the application examined by outside security specialists, who tested it the way an intruder would.

We spent the whole month working on what they found. The fixes ship with version 3.7.6, at the beginning of September.

What changes for you

In everyday use, nothing. There are no new screens to learn, and your data stays where it is.

The work is all behind the scenes. The application now tells the browser more strictly what it may and may not do, the components it is built on have been updated, and the app used at the entrances only accepts the credentials meant for check-in. So the people greeting guests cannot get into the rest of the program with the same access.

We are not going into the detail of each fix, for the simplest of reasons: describing them would help anyone wanting to exploit them on installations not yet updated.

Update as soon as you can

If you use CerimoniereWeb, write to us to schedule the move to 3.7.6.