A new security patch for Portal for ArcGIS is out. The patch is available versions of portal 10.6.1, 10.5.1, 10.4.1, and 10.3.1 and is a cumulative security patch for all issues available for the Portal version. Check out the new blog post by Michael Young below for details: Portal for ArcGIS Critical Security Patch - Elevation of Privilege Vulnerability
Recommendation:
Everyone should install this patch
Pete
That patch does not show up in the Portal 10.5 "Check for Updates" tool
Hi Bill,
There are two patches - one's a cumulative patch for 10.3.1, 10.4.1, 10.5.1 and 10.6.1 - referred to as the "Portal for ArcGIS Security 2018 Update 3" patch. This patch contains the critical privilege escalation patch plus patches for other medium priority issues.
For 10.3, 10.4, 10.5, and 10.6, we've released a stand alone patch that only addresses the critical issue described as:
This patch is titled "Portal for ArcGIS Privilege Escalation Security Patch"
For 10.5.0, you should see "Portal for ArcGIS Privilege Escalation Security Patch".
The recommendation is to move to the "dot" minor version and install the full Update 3 patch. If that's not possible, due to the critical nature of the issue addressed, we took the step to provide a stand-alone patch for this this issue at the current major releases as well.
I don't have a 10.5.0 machine handy, but I'm curious to see if you see "Portal for ArcGIS Privilege Escalation Security Patch" in patchfinder. I do see the "Portal for ArcGIS Security 2018 Update 3" patch in the 10.5.1 patchfinder.
Adding more areas:ArcGIS Enterprise Implementing ArcGIS
Thank you Randall,
I still did not see either patches offered in the check for updates tool.
I manually checked the esri downloads web page and fond the specific patch for 10.5.0 as you mentioned.
It installed in about five minutes and I went ahead and rebooted that server.
-Bill
Randall,
While looking for this fix I was confused thinking this is the TLS issue too and noticed the TLS patch for ArcGIS Desktop 10.6.1 is out now.
So, I applied it on a ArcMap 10.6.1 windows 10 desktop and can now see content again from my 10.5.0 Portal.
Users were having to stick with Desktop 10.6.0
Can you please clarify this a little bit?
Randall Williams
Signed in members can post, follow updates, and more. New here? Register a free account.
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.
