Skip to Main Content
Spotfire Ideas Portal
Status Future Consideration
Product Spotfire
Created by Guest
Created on Jan 31, 2020

Separate Spotfire web admin interface from default user interface port 80/443 to increase security

Problem

At the moment the default web admin interface is using the same interface as the default user interface port 80/443. With this there will always be a security risk and with the recent CVE that makes cross-site scripting (XSS) attack possible you are forced to roll out a service pack. If the CVE was never reported this would have been a serious gap in security. And there is also no guarantee there will be no future XSS possible. 

 

Suggestion

The only way to prevent this is to separate the web admin interface from the default interface port 80/443. With that admins are able to setup their load balancers and firewalls differently for the web admin interface and shield the web admin interface from a user-LAN.

 

  • Attach files
  • Admin
    Miguel Díez
    Reply
    |
    Feb 20, 2020

    Hi Bart,

    We agree is good to have them separated. We can make it configurable.

    Thanks