This is a note of a critical security issue found in some of the libraries Bamboo uses with its on-premises products. This does not affect SharePoint Online/Microsoft 365 customers.
Bamboo uses a standard .NET library to support the User Interface (UI) experience for its products that is developed by Telerik (Telerik .NET Components Suites & UI Libraries)
Telerik noted a security vulnerability as follows: “A vulnerability in Telerik UI for ASP.NET could allow for arbitrary code execution. ASP.NET is an open-source server-side web application framework designed for web development to produce dynamic web pages.” Details of the security flaw can be found here: A Vulnerability in Telerik UI for ASP.NET Could Allow for Arbitrary Code Execution (cisecurity.org)
Since most of our customers are in closed SharePoint services and not accessible to the outside world, we did not address this security issue at first. However, Security teams for our customers have required us to move off this version of Telerik to a version that does not have this vulnerability.
Bamboo has created a hotfix for its products that is available at no charge for customers on active support.
Process for the customer to obtain the hotfix
- Open a support ticket through this link: Submit a request – Bamboo Solutions Knowledge Base (zendesk.com)
- Support will work with you to identify all servers that require the hotfix.
- We can only deploy the hotfix to servers running Bamboo products.
- Servers receiving the hotfix must be properly licensed and on support.
- Support will provide the hotfix and simple instructions for its deployment to each server.
Once deployed, Bamboo products will be updated and using Telerik Version 2021.1.330.45
Please reach out to support if you have any questions or concerns on this matter.
SharePoint Online
The cloud parts are functional components that extend your SharePoint Online environment in Microsoft 365.
Supports Classic and Modern sites for SharePoint Online/Microsoft 365
Small Business Pricing and Discounts
SharePoint
Top SharePoint Online Products
Experience greater power and savings by bundling our SharePoint apps and cloud parts.
On-Premises Only
These web parts extend SharePoint beyond its out-of-the-box capabilities by tailoring it to your requirements with Bamboo Solution’s growing portfolio of SharePoint Web Parts.
SharePoint 2016, 2019, 2022 – Classic Pages Only
SharePoint
Top On-Premises Only Products
Experience greater power and savings by bundling our SharePoint apps and web parts.
Our team of Microsoft 365 Technology Consultants helps you get the most out of your Microsoft technology, we have the best Microsoft 365 talent to streamline your organization.
Consulting to Streamline Your Department
M365 Plus
Managed Services
Microsoft 365
Consulting to Streamline Your Department
Our Consultants Have What You Need
Federal Contractors
Microsoft 365
Our Consultants Have What You Need