阅读677 返回首页    go iPhone_iPad_Mac_apple

what version is the download?

Unable to find out what version of iCloud this download is?

MU IT Security Advisory

Software Vulnerability for Apple iCloud for Windows®

Apple has announced a critical security vulnerability for their iCloud for Windows product. iCloud is not a default part of the campus computer image, however is often offered/installed as an additional component after installing Apple iTunes.

 

According to the Apple support site, versions of iCloud for Windows prior to 7.0 contain vulnerabilities which allow for execution of arbitrary code with system privileges. [critical issue]

 

Impact

Because using unsupported software may increase the risk from viruses and other security threats, members of the Marshall University community are advised to uninstall the Apple iCloud software if it is not being used. If you have essential application which specifically requires iCloud for Windows, you should upgrade to version 7.0 or later as soon as possible.

 

Requested Action

Apple, the US-CERT, and the Marshall Information Technology team recommend system users and administrators be aware of the risks associated with unsupported software and take the following actions in response to this advisory:

  • Determine if Apple iCloud for Windows software is a necessary component for any business-critical applications.*
  • Uninstall iCloud for Windows Software (if you have administrative privileges) and you have determined that it is not needed for machines which you own or manage; or Contact your IT Service Provider (if you do not have admin privileges ) and ask whether iCloud software can be safely uninstalled;
  • Be Aware of Automated Efforts Which Are Underway by the Marshall IT Security team through the use of the KACE software inventory platform to do the following:
    • Compile a list of University-owned computers which have iCloud software below version 7.0 installed
    • Schedule KACE Desktop Alerts for machines which still show at-risk versions of iCloud software installed
    • Automate the uninstallation of iCloud software where is it not needed; apply vendor-tested patch when it becomes available
  • Discontinue installation of Apple iCloud for Windows software in new system image builds and PC deployments.

 

*Note: Please contact Marshall IT Service Desk or your department IT service provider to let us know if you have a business-critical application which requires the continued use of iCloud for Windows software.

 

Reference Material

 

Thank you for your continued attention to information security,

 

Jon B. Cutler  |  Chief Information Security Officer | Marshall University |  1 John Marshall Drive, DL-324  | Huntington, WV 25755-2066  | U.S.A. |

Office: +1 304 696 3270 | Email: jon.cutler@marshall.edu  | Twitter:  @joncutler

最后更新：2017-10-02 22:22:58

  上一篇：go Family Storage Sharing
  下一篇：go Will Romania have this service soon? We do have...