Security Issues Resolved in 2022.03

The following security issue was addressed in the 2022.03 release.

Configuration Added for Re-Validating Users Before Sending Entitlement Emails

A new configuration option Use Recaptcha validation when sending entitlement emails has been introduced to enable the Google ReCAPTCHA validation mechanism when sending entitlement emails. The option is located under System > Configure > FlexNet Operations > General Options.

If selected, entitlement emails will only be sent after re-authentication using the Google reCAPTCHA mechanism.

This option works in conjunction with the following existing options for setting the site key and reCAPTCHA password:

•

System > Configure > FlexNet Platform Server > General Options > Recaptcha Site key

•

System > Configure > FlexNet Platform Server > General Options > Recaptcha Secret password

If selected, the List Entitlements email preview page of the Producer Portal shows the “I’m not a robot” check box which enables the user to send an entitlement email.

By default, this option is unselected.