Global attention has recently focused on a security vulnerability caused by the "Heartbleed" software flaw, an Open SSL bug that can make customer password and credit card data accessible to hackers. Upon learning of this flaw, openSource immediately reviewed its Open SSL update history. To our great relief, we discovered that our conservative policy with regard to Open SSL updates has resulted in avoidance of this problem.
openSource sessions continue to be encrypted without "Heartbleed" vulnerability and all passwords remain highly secure through our use 1048 bit encryption.
We hope that this report eases any concerns you may have. Thank you for being an openSource customer.
The openSource Support Team
Tags: CM News