Release

07-08-2020

Compatibility

The following client versions are compatible with AdminClient Version 8.11.1.19827 Hotfix 1

  • Windows Client Version 8.7.0.16387 Hotfix 1
  • Windows Client Version 8.7.0.16698 Hotfix 2
  • Windows Client Version 8.8.0.17146
  • Windows Client Version 8.8.0.17168 Hotfix 1
  • Windows Client Version 8.8.0.17596 Hotfix 2
  • Windows Client Version 8.9.0.17656
  • Windows Client Version 8.9.0.17702 Hotfix 1
  • Windows Client Version 8.10.0.18464
  • Windows Client Version 8.10.0.18516 Hotfix 1
  • Windows Client Version 8.11.0.19788
  • Windows Client Version 8.11.1.19823
  • Windows Client Version 8.11.1.19827 Hotfix 1
  • WebClient Version 8.7.0.16387 Hotfix 1
  • WebClient Version 8.7.0.16698 Hotfix 2
  • WebClient Version 8.8.0.17146
  • WebClient Version 8.8.0.17168 Hotfix 1
  • WebClient Version 8.8.0.17596 Hotfix 2
  • Windows Client Version 8.9.0.17656
  • Windows Client Version 8.9.0.17702 Hotfix 1
  • Windows Client Version 8.10.0.18464
  • Windows Client Version 8.10.0.18516 Hotfix 1
  • Windows Client Version 8.11.0.19788
  • Windows Client Version 8.11.1.19823
  • Windows Client Version 8.11.1.19827 Hotfix 1
  • Password Safe Mobile Apps 1.19

Hotfix 1

The version of PuTTY used in Password Safe to establish SSH connections contains a security gap: It has an observable discrepancy that leads to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client).

Therefore we are releasing a hotfix for version 8 with the latest PuTTY version with the appropriate update to close this gap. In order not to take any unnecessary risk, we ask users of version 8 to install the latest hotfix. You can download it via the update search in the software or via the customer information system (KIS).

We also recommend that all our customers using PuTTY versions 0.68 to 0.73 to update the latest version.

New since version 8.11.1.19823

FullClient

  • When copying the One-Time-Password (OTP), any spaces are removed.

OfflineClient

*When copying the One-Time-Password (OTP), any spaces are removed.

Fixed since version 8.11.1.19823

FullClient

*System tasks with weekly or monthly interval have been adjusted.
*Users can only choose between different rights templates when creating passwords if they have the right “Can view selection of rights templates”.

  • Passwords are also saved if additional form fields are added during creation.
  • Changes to the rights of organisational units have a direct effect on associated passwords.

WebClient

*The WebClient also works in Internet Explorer.

AdminClient

*The migration process from Password Safe V7 to V8 has been optimised.

Add-ons

  • In a terminal server session the addon for Google Chrome connects to the SSO client if the appropriate settings are made.

API

*The Library “web-socket-sharp.dll” has been added.

OfflineClient

  • The password can be copied to the clipboard via the ribbon or field menu.

Was this helpful?

Yes No
You indicated this topic was not helpful to you ...
Could you please leave a comment telling us why? Thank you!
Thanks for your feedback.