Tag: security

Expand What You Know: Security and Administration

Web GIS includes a system of engagement

ArcGIS Online administrators have a lot to consider. What’s an effective security model? How should you set up your organization? What scripting tools are available? In this final Expand What You Know series, we highlight recorded technical sessions that help … Continue reading

Posted in ArcGIS Online | Tagged , , , , | Leave a comment

An Important Message About Web Security and Story Maps


Attention Story Map Authors: Please read this important message as it may require you to take action and change how you build story maps. When you make a story map, you expect it to work and that your audience will … Continue reading

Posted in ArcGIS Online, Story Maps | Tagged , , | 3 Comments

It’s World Password Day – Time to Change Your ArcGIS Online Password


We love seeing all the great work you and your organizations share publically on ArcGIS Online. Many of you have been using it for 5 years (or more)! But if you are not using enterprise logins and have never changed … Continue reading

Posted in ArcGIS Online, Security | Tagged , | Leave a comment

Struts Vulnerability Bandwagon


While we don’t have a habit of announcing when our products are NOT vulnerable to a specific security issue, sometimes IT teams pounce on the panic button (understandably) when they hear about a new critical vulnerability that hit the media mainstream.  … Continue reading

Posted in Security | Tagged , , | Leave a comment

Enable Web AppBuilder for ArcGIS Developer Edition to work with CA signed Certificates


This blog post was contributed by Craig Cleveland, a Solution Engineer on the National Government Team in the Esri Washington, DC office.

Posted in App Developers, Apps, ArcGIS Enterprise, ArcGIS Online, Developer, Portal for ArcGIS, Web | Tagged , , , , , , | 4 Comments

Esri Privacy & Security Assurance Advancements

We are kicking off the beginning of the year with some significant privacy & security assurance improvements:

Continue reading

Posted in Security | Tagged , , | Leave a comment

ArcGIS Server Security Patch (2016 Update2)


Esri has released a significant security update for ArcGIS Server and we recommend our customers apply this patch in a timely manner.  Key security patch components are: 1.) Cumulative, containing fixes from the 2016 Update1 Linux security patch (there was … Continue reading

Posted in Security | Tagged , , | 5 Comments

License Manager Security Update

ArcGIS License Manager is built with a third party software component called Flexera FlexNet Publisher. Recently, a CVE (CVE-2015-8277) was released detailing buffer overflow vulnerabilities associated with Flexera FlexNet Publisher.  Esri is providing ArcGIS 10.4 License Manager to resolve these Flexera-based vulnerabilities. Continue reading

Posted in ArcGIS Enterprise, Security | Tagged , , , , | 10 Comments

Encryption Certificate Updates Coming


We are happy to announce that our update of ArcGIS Online transport encryption certificates to a stronger hashing algorithm will be complete December 2nd, 2015.  Specifically, we are transitioning from SHA-1 to SHA-256 certificates (also referred to as SHA-2). Why? … Continue reading

Posted in Security | Tagged , | Leave a comment

Developers – Track Dependencies & Update Apps or Risk Exposing Users


The days of developers not keeping track of where they use third party libraries and not upgrading them are dead.  Why?  Over the last year awareness of vulnerabilities in these dependencies has increased in general and also as  security researchers … Continue reading

Posted in Security | Tagged , , | Leave a comment