Issues Resolved in Fix Version 8.4.3000

The table below lists the issues resolved in Version 8.4.3000.

Version 8.4.3000

Incident Index

Incident Description

Management

OVOC-21104, OVOC-20967

Central OVOC PDF Reports cannot be downloaded.

OVOC-21066

Topology conditions for forwarding rule are removed after rule is enabled or disabled.

OVOC-18234

Tasks display error when exporting calls or syslog as CSV file.

OVOC-20934

The Apache server is restarted due to too many connections.

OVOC-21657

The MP-524 icon is displayed as a question mark.

OVOC-21607

The Cloud license fails to send a usage alarm.

OVOC-21064

The SBC displays Configuration Mismatch Status.

OVOC-21044

Hyper-V: Insufficient partitions size.

OVOC-20984

Resolve multiple IP addresses for the same FQDN.

Security

OVOC-18255 OVOC-17748

OVOC fails to import certificates.

OVOC-18124

WebSocket tunnel password does not support 20 digits.

OVOC-18122

Apache Tomcat vulnerability fix.

OVOC-17261

Disable automated address lookup for device’s map location coordinates.

OVOC-21448

Insufficient Input Validation

OVOC-17895

Configured SSH ciphers and algorithms are not applied

QoE

OVOC-17855

Filter AC termination Reason does not work

Device Manager

DM-1685

250407-000164/DEFRA-Javascript vulnerabilities 8.2.3122.

DM-1675

Sensitive Information is exposed in the HTTP GET Parameter in the URL and is visible in browser history, server logs. Consequently this may lead to compromising of sensitive data such as authentication tokens or personal details.

DM-1171

USA - ECF Data LLC - DM 8.4.51 not able to search for number.

DM-1430

Searching by user or phone number in the main search bar in the Monitor page is not working.

DM-1672

Stored Cross-Site Scripting vulnerabilities.

DM-1671

Local File Inclusion.

DM-1448

The Device status indicator in the Manage Users page does not report data when the page is unfiltered.

DM-1222

The Device Monitor page does not retrieve data when filtered by site name.

DM-1195

When the Tenant name is changed in OVOC, the Tenant configuration is removed.

DM-873

Cloning template with configuration fails.

DM-1616

Penetration tests exposed vulnerabilities using file upload mechanism.

DM-633

When logging to Device Manager with End User permissions and then performing configuration changes, the phone configuration file is corrupted and the phone becomes inoperable.

OVOC-21642

Devices are shown as unregistered on the Device Manager even though all handsets are connected to the network.

DM-1030

Check Status messages for SIP Gateway devices generates an error. Workaround: Change the template for IGS devices: 405HD, 425HD, C450HD, 445HD , 450HD to change the Keep-Alive parameter to 1 in order to update device status information in the Monitor page.