MyDRE | Vulnerability Evaluation

Vulnerability evaluation
Low severity vulnerability in Linux VMs patch
TL;DR: We have found a low severity vulnerability in Linux VMs. It has been patched for newly created VMs. Existing VMs can be self-service patched by downloading and running the script below. What happened? While troubleshooting a Linux VM, we ...
myDRE is NOT vulnerable for Text4Shell (CVE-2022-42889)
TL;DR myDRE is NOT vulnerable for Text4Shell (CVE-2022-42889). The National Cyber Security Center (NCSC) has announced that a vulnerability with impact High/High (CVE-2022-42889) has been identified in Apache Commons Text v1.5-v1.9. It is being ...
ATTENTION! In the periphery of myDRE a phishing attack is/was executed
We have learned that there is/was a large phishing attack by one of our Tenants. When you receive emails: Don't panic Don't click any links Check the Sender If 'phishy' DO NOT DELETE, until instructed report the email to Your company If seems to ...
myDRE is NOT vulnerable for CVE-2022-26809 - Serious Vulnerabilities in Microsoft Windows Workplaces and Servers
Situation Last “patch Tuesday” Microsoft disclosed and fixed a large number of serious vulnerabilities in Microsoft Windows. One of these vulnerabilities is identified as CVE-2022-26809 with a CVSS score of 9.8 (scale 1-10). CVE-2022-26809 is a ...
Vulnerability in Apache Log4j (CVE-2021-44228)
Background See: https://nvd.nist.gov/vuln/detail/CVE-2021-44228 Impact on anDREa and all its services Production anDREa does not use Log4J or forks in production. Impact: NONE Actions: no action needed update: 2021/12/13 Workspaces that might have ...

Popular Articles
Activating your new @mydre.org account
Before you can access your DRE workspace(s) at mydre.org, you need to activate your @mydre.org account. Below, we explain the steps in this activation process, along with screenshots for illustration. Prerequisite: your new @mydre.org username, which ...
R and RStudio using External Access rules
This method of downloading R packages is outdated! This article will not be updated any longer. IP addresses are often subject to change. Therefore, the domain allowlisting feature has been introduced and it is self-service for Accountable and ...
Atlas.ti
Older versions of Atlas.ti will show the option to validate your license offline. Unfortunately, this procedure no longer works. You can still use Atlas.ti by allowlisting the domain atlasti.com, as explained under Step 2 in Validating your Atlas.ti ...
Python, Anaconda and JupyterLab
With domain allowlisting now being a self-service feature, this is the preferred option. For proxy settings in Anaconda in combination with domain allowlisting, please follow this article: ...
Proxy configurations Anaconda
First version: 2022-10-31 Latest version: 2023-11-16 Last change(s): Clarification in the introduction; clarifying instructions; added screenshots. This is a community effort. The article was created by the anDREa Support Team in their spare time. If ...

MyDRE | Vulnerability Evaluation | Help Center

Vulnerability evaluation

Low severity vulnerability in Linux VMs patch

myDRE is NOT vulnerable for Text4Shell (CVE-2022-42889)

ATTENTION! In the periphery of myDRE a phishing attack is/was executed

myDRE is NOT vulnerable for CVE-2022-26809 - Serious Vulnerabilities in Microsoft Windows Workplaces and Servers

Vulnerability in Apache Log4j (CVE-2021-44228)

Popular Articles

Activating your new @mydre.org account

R and RStudio using External Access rules

Atlas.ti

Python, Anaconda and JupyterLab

Proxy configurations Anaconda