Updated April 29, 2014: OpenSSL Heartbleed Extension Vulnerability for Conferencing Support services

Conferencing Support continues to address the OpenSSL security vulnerability known as "Heartbleed". We have inventoried and assessed our infrastructure to identify potential areas of concern, implemented a process for gathering information from our suppliers and substantially completed patching/upgrading of the affected systems, applications and devices. Our assessments and scans are ongoing, and, as a precautionary measure, we continue to maintain an increased level of monitoring and surveillance of its infrastructure designed to mitigate this risk.

Fortunately, all web services provided by and supporting Conferencing, such as e-Meetings, MyMeetings, and API integration sites, are using a non-vulnerable version of OpenSSL. More information is available at this web site:
https://www.us-cert.gov/ncas/current-activity/2014/04/08/OpenSSL-Heartbleed-Vulnerability.

Further, Cisco and Microsoft have notified Conferencing of a security advisory for the OpenSSL Heartbleed Security Extension Vulnerability related to the Cisco WebEx suite of products and the Microsoft® Office Live Meeting product. Cisco and Microsoft have confirmed their net conferencing services are not affected.

Note: Cisco WebEx Messenger was initially reported as vulnerable but has been remediated.

For those customers affected, Conferencing has remediated the Open Video device that was identified by Cisco as being vulnerable – a VCS upgrade to 7.2.3 was deployed on April 21, 2014.

The Cisco advisory is available at the following link:

Cisco Security Advisory: OpenSSL Heartbeat Extension Vulnerability in Multiple Cisco Products http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed

If you have any further questions or concerns, don’t hesitate to contact your Conferencing account manager for further information.

Customer questions for net conferencing products are being directed to Conferencing Support at 866-449-0701. Also, you may submit your inquiry via the following 'Contact Us' link:
https://www.mymeetings.com/custom/res/content/resNumbers.php

HOST: ndcmmmp02/127.0.0.1