Security

Hello all, Our IT department has the policy to remove all the vulnarible Log4j related files from the systems which came from a server scan.  We have a FME server 2020.1 with engine 2020.2.5The scan gives the following files: C:\\Program Files\\FMEServer\\Server\\fme\\plugins\\activemq-all-5.6.0.jarC:\\Program Files\\FMEServer\\Server\\fme\\plugins\\log4j-1.2.16.jarC:\\Program Files\\FMEServer\\Server\\FMEEngineUpgrade\\plugins\\activemq-all-5.6.0.jarC:\\Program Files\\FMEServer\\Server\\FMEEngineUpgrade\\plugins\\log4j-1.2.16.jarC:\\Program Files\\FMEServer\\Server\\lib\\log4j-1.2.14.jarC:\\Program Files\\FMEServer\\Utilities\\tomcat\\webapps\\fmeapiv4.warC:\\Program Files\\FMEServer\\Utilities\\tomcat\\webapps\\fmeapiv4\\WEB-INF\\lib\\logback-classic-1.2.3.jarC:\\Program Files\\FMEServer\\Utilities\\tomcat\\webapps\\fmerest.war&quot

Hi,We have installed a FME Server 2020.1.1.1 with a 2020.2.5.1 engine.Our security department has te following questions : •            Are there plans to upgrade the Java version to the newest version? •            Is the installation of Adobe Reader/Writer a part of the global installation?•            Is the installation of Adobe Flash a part of the global installation? Hopefully somebodey can answer the questions. with kind regards, John van der KleijnFunctional manager GISMunicipality Eindhoven

Hi, I found remote command execution and directory traversal vulnerabilities on FME Server 2020.2.3.How can I send you the exploit ? Do you have a mail dedicated to security alerts ?Regards

Hey all, seems a new vulnerability is currently being exploited across the wider network. From what @Todd Davis​ and myself have determined, it seems it will effect FME Server. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228https://arstechnica.com/information-technology/2021/12/minecraft-and-other-apps-face-serious-threat-from-new-code-execution-bug/ Further investigation seems to show that FME Server 2021.1 and on wards contain 2.13. Versions post 2.10 can include the following par

We are using FME Server 2021.0.0.1. In order to be safe against Security Vulnerability Reported Against log4j, do we need to update our current version to 2021.2 ? or should we stay on our current version and wait for the 2022 version?

I would like to know if I could compromise my microsoft account (hacker accessing my One Drive files and microsoft account) by putting my connection credentials for OneDrive in a script on the FME Cloud that is then accessed via a Server App.

We have created a GCP Service Account. Although we got the File based Cred/Python ingestion to work, we are not happy with that approach as far as security risks. Is there a way to establish a Web Connection to GCP BigQuery using a Service Account (FME 2019.2)? 

We have an issue where the license server (flex) is going through loads of ports which are closed before finding an open one, as a result everytime we try to run FME it hangs for about 30s waiting for the license ping back, is there anything we can do to try to consistently use an open port? We dont seem to have issues with other licenses that are hosted on that server.

You can set security on database/web connections but the admin user has the permission to view, use and execute by default. Assume that a user knows the name of a secure database connection on the server and use that same name in his workbench as a private parameter with different parameters but with the same as the secure connection on the server. When the user upload his workbench to the server, he will not be able to execute the workbench on the server because he doesn't have the permission to use the database connection on the server. But he asks to schedule his workbench and the admin user configures the schedule for this workbench. From that moment the workbench is able to use the database connection on the server because the admin user has the permission to use the secure database connection.A solution could be that the schedule is configured by another user than admin. Is there any other way to handle this security issue?We are running FME Ser

I´m executin this command to upload the FME license: curl -X POST "https://localhost:443/licensing/license?filetype=fmelic" -H "Authorization: fmetoken token=****" -H "Content-type: application/octet-stream" -H "Accept: application/json" --data "@fme_license.fmelic" But i got this error:<!doctype html><html lang="en"><head><title>HTTP Status 404 – Not Found</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 404 – Not Found</h1><hr class="line" /><p><b>Type</b> Status Repo

I would like to know what TLS version is supported for FME 2020 desktop.

I have a copy of FME Server for Linux. After looking at the documentation, can I integrate Windows Active Directory/LDAP from a Windows Domain Controller? I didn't see any RHEL 7 'linux' based configurations in the guide...

We get the error "Can't connect to HTTPS URL because the SSL module is not available." when running a workspace on FME Server but the same workspace run from FME Desktop is okay. FME Desktop 2020.2.1.0 (20201130 - Build 20806 - WIN64)FME Server 2020.2 Build 20787 - win64 ```2021-1-26 19:19:35 | ArcGIS Feature Service Reader: Requesting metadata for Feature Service at 'http://mapservices.gov.yk.ca/arcgis/rest/services/GeoYukon/GY_Biophysical/MapServer'2021-1-26 19:19:48 | ArcGIS Feature Service Reader: Could not connect to server. Check that you are connected to the internet and that no firewall is blocking outbound connections. The error was 'HTTPSConnectionPool(host='

I have a customer that 4-5 times a year need to run an fme workspace on an offline computer. This computer can not be connected to any network at all.They have floating licenses and now would like to borrow a license without connecting to client to the license server.Is this possible?

Hi, I followed this guide: Sending email, Part 1: Setting up a topic and an email subscriber (safe.com) And we know our port is 25. I followed the guides and troubleshooting, turned the Allow Less Secure apps ON in gmail as well. But still I get stuck on the Creating the email subscription step, the validate gets this error:SSL error occurred. Ensure connection security and port are correct. Unrecognized SSL message, plaintext connection? I am on company server via VPN so I cannot access the services.msc or make changes to the firewall. Any idea if I entered something wrong?

Hello, I'm curious if there are any potential security issues with a data download application via the result download link. How long do these download links last? Can they be scraped by bad actors? It seems even with an authenticated application the results URL is still publicly accessible in this format: https://[servername]/fmedatadownload/results/FME_[A-Z0-9staticstring]_[0-9string(datestamp perhaps?)]_[0-9]*4.zipIs this already an encoded token? Thanks!

We cannot access an FME Desktop floating license from a remote computer. The remote computer locates the license server and requests a license, but the license server returns the error message, "FME floating license system failure: no SERVER lines in license file(-13)". Accessing FME Desktop on the license server itself is successful, however, and the license file appears to be correct (safe.lic in the C:\\FlexServer folder). Unfortunately, the FlexNET documentation does not provide a solution or troubleshooting options to the error message.

I am using the Directory and File Pathnames reader and I receive the warning. No files found in folder '____' using glob pattern '**/*' with glob filter 'ANY'. No features will be read.However, there are clearly folders in this location   To ensure it wasn't security issues, I tested the Adobe Geospatial PDF reader to read a PDF within the folder and it can read the contents perfectly. Does anyone have any idea why I can't read any directories or pathnames?  

I have 3 different servers for development, testing, and production. What is the best way to duplicate user accounts across all 3 servers?

Hello,I upgraded FME Server from 2019.2 to 2020.0, and restored the configuration by importing the backup file which has been downloaded before uninstalling the previous version.Some of existing workspaces are run via API (request from a web page) and access a PostgreSQL database to read features with a FeatureReader, execute a SQL query with a SQLExecutor and so on.What I observed is, after upgrading to 2020.0, the workspaces failed to access the PostgreSQL database and logged this error message.FME Server error: `FME Server error: `Unauthorized request by user due to lack of proper permissions.'I was able to resolve the failure by manually adding access permission for the database connection to the API token, but it's a bit troublesome if you need to check and fix permissions of every Token whenever upgrading FME Server.I upgraded the FME Server several times before (FME 2019.0 -> 2019.1 -> 2019.2), but I didn't need to m

Hello, I was looking into FME Server when I noticed that there was a vulnerability listed for the software. It can be found here: https://nvd.nist.gov/vuln/detail/CVE-2018-20402  Has this been acknowledged?

Hi all,  I have noticed every few hours the token on my topics webhook keeps changing, which causes the webhook to no longer fire. I have tried to set the token to one i have generated in the account that lasts for several years, but this still does not work. Any ideas on how to resolve this? 

Hi,Managing Tokens has changed in FME Server 2019 vs 2018 and I noticed the url for generating a Token with an expiration of 3 days without an update does not deliver the same token in 2019 in contrast to version 2018.The url used has the format:https://<fmeserver>/fmetoken/generate.json?user={{FMEUSER}}&password={{FMEPW}}&expiration=3&timeunit=day&update=falseand creates a new token (with a new 3 days expiration) every time in FME Server 2019 in contrast to 2018 where is returns the same token within the expiration period.I’ve searched for some kind of equivalent url, but haven’t found it yet.Is it still possible to get the same token during the expiration period in 2019 and what (service( url should I use?Kind regards, Krien Guijt

Can you connect to ADFS (Active Directory Federation Services (ADFS) is a(SSO) solution created by Microsoft ) and handle login on FMECloud through this? Similar to connecting to AD on FME Server

FME Server throws this error when I try to create a new user account: Error: org.postgresql.util.PSQLException: ERROR: duplicate key value violates unique constraint "fme_useraccount_pkey" Detail: Key (useraccount_id)=(#) already exists. where "#" increments after every attempt. It seems to be getting hung up on this user account id every time I try to create a new user. There is no such user already created. Background: we recently migrated FME Server to a new hosting environment and the issue only appeared after the migration. version: FME Server 2016.1.2.1 - Build 16674 - win64Any idea what could be going wrong here?