Uniprint Security Update - June 2024

June 20th, 2024

Background

Pharos has identified security vulnerabilities impacting Uniprint. At this point, Pharos does not believe that these vulnerabilities are being actively exploited and is not aware of any customers that have been impacted.

Impacted versions of software

• Uniprint 8.4 to Uniprint 9.2:

• SignUp

• Pharos API for Uniprint 9.2

Pharos Response

Pharos has developed the following updates for Uniprint:

• New version of Pharos API (5.0.32) for Uniprint 9.2

• New SignUp files (SignUpNerveCenterRev344.zip) for Uniprint 9.1 SP3 and 9.2

Mitigation steps for impacted software

Please take the following steps to secure your Uniprint system:

• For Customers using SignUp:

  • Upgrade to Uniprint 9.1 SP3 or Uniprint 9.2 (if needed)

  • Download the SignUpNerveCenterRev344.zip file from the Uniprint Hot Fixes web page

    • In file properties, unblock the zip file, then unzip the file

    • On each Pharos Web Services machine, perform the following steps:

      • Copy the supplied files to the inetpub\wwwroot\SignUp directory, overwriting the existing files

      • This includes pasting the HelpHeader.asp to the inetpub\wwwroot\SignUp\Help directory

  • If using Uniprint 9.2, update Pharos API version to 5.0.32 via the Updater Service

• For Customers NOT using SignUp:

  • Either:

    • Follow the instructions above for SignUp files replacement, OR

    • Locate the inetpub\wwwroot\SignUp directory on the Uniprint Web Services machine and delete the directory. This will not impact the functionality of the Uniprint popup packages web page or any other Uniprint functionality.

  • If using Uniprint 9.2, Update Pharos API version to 5.0.32 via the Updater Service

How do I determine what version of software I'm on?

• Uniprint: Uniprint Updater Service shows available packages, installed packages, and their respective version numbers.

• Pharos API: Version number located on the Print Center login page or the Updater Context in the Administrator Console

• SignUp: Same version as the Uniprint version

How much time will these updates take?

For Uniprint, if a customer is already on Uniprint 9.1 SP3 or 9.2 General Release, the updates should take less than 15 minutes per server. If a customer is on an earlier version, it may take around 15 minutes to an hour per server to apply the Service Pack, including this update (servers can be updated concurrently).

What if I need help with the upgrade?

If you prefer Pharos to manage the upgrading of your older Uniprint system to the latest version to ensure a smooth and hassle-free experience, please contact clientservices@pharos.com  and our Professional Services Team will prepare a quote for you.

We understand that you depend on Pharos for your user printing and want to assure you that the security and uptime of your system is our number one priority. If you have any questions, please submit a support case on the Pharos Help Center