Skip to content
Use the search to find information about InterSystems products and solutions, career opportunities, and more.

Alert: CSP Gateway Can Forward Response to Incorrect Web Client

February 11, 2020 – Alert: CSP Gateway Can Forward Response to Incorrect Web Client

*** Updated 2/11/20 2:15pm ***

*** 2017.2.1 version is NOT affected by this defect ***

InterSystems has corrected a defect that can cause the CSP Gateway to forward a response to the wrong web client. This defect is not present in the Web Gateway.

The CSP Gateway is distributed as a component of a full instance installation and also as a standalone installer. Both distributions are affected by the defect. The CSP Gateway installed with the private Apache web server for the Management Portal is also vulnerable. The affected versions of the CSP Gateway are associated with Caché or Ensemble:

  • 2016.1.4 and older
  • 2016.2.0, 2016.2.1, and 2016.2.2
  • 2017.1.0, 2017.1.1, and 2017.1.2
  • 2017.2.0
  • Versions of the CSP Gateway that are included with all HealthShare products based on the above Caché/Ensemble versions

The defect is dependent on the CSP Gateway version and independent of the Caché or Ensemble version that the CSP Gateway connects to.

The correction for this defect is identified as CMT1608. InterSystems recommends upgrading all affected CSP Gateway installations to the latest version of the CSP Gateway (2018.1.3), which is available via the Worldwide Response Center’s software distribution page, in the ‘ Components’ section. Supported customers can request access to the WRC application by contacting the Worldwide Response Center.

If you have any questions regarding this alert, please contact the Worldwide Response Center.

RELATED TOPICS

Latest Alerts & Advisories

15 Aug 2024
InterSystems has corrected a defect that can cause database corruption or errors with multi-volume databases under extremely rare circumstances. Only databases that have been truncated are at risk.
24 Jul 2024
There are four alerts in the HS2024-03 Alert Communication. A summary of each alert is shown below. Details for each alert are contained in the linked document.
24 Jun 2024
Broadcom recently announced a problem that can cause data consistency errors in database applications. The Broadcom article is available here:
30 May 2024
Beginning with the release of InterSystems IRIS® data platform 2022.3, InterSystems corrected the license enforcement mechanism to include REST and SOAP requests. Due to this change, environments with non-core-based licenses that use REST or SOAP may experience greater license utilization after upgrading. To determine if this advisory applies to your InterSystems license, follow the instructions in the FAQ linked below.
01 May 2024
InterSystems has corrected an issue that can cause a small number of SQL queries to return incorrect results. See below for the specifics on impacted queries.
08 Apr 2024
InterSystems has encountered a defect that causes some upgrades of HealthShare® Health Connect to fail. This only affects instances that are not licensed for the use of FHIR® and that have interoperability-enabled namespaces. Under these conditions, the upgrade fails with an error.
19 Mar 2024
In evaluating an IBM Support notification, InterSystems has determined a potential impact for our customers. The notification in question is:
27 Feb 2024
There is 1 alert in the HealthShare HS2024-limited Alert communication. An alert summary for the issue is shown is in the table below. Details for the alert are contained in the attached document: HS2024 Limited Communication.
01 Feb 2024
There are 2 alerts in the HealthShare HS2024-02 Alert communication. An alert summary for each issue is shown is in the table below. Details for each alert are contained in the attached document: HS2024-02-Communication.