PolygonPassword Manager Incident Review
/docs-archive/support-network/ · last edited 07 Mar 2020 · Support
Last week, a critical security issue was discovered in the password manager application used by the Polygon self-hosted home server platform. The root cause was traced back to a software update that introduced a vulnerability. Specifically, the new version of the password manager did not properly validate certain fields, allowing for a potential injection attack. This flaw was present in the latest update deployed last Tuesday, which affected all users of the system.
To address this issue, immediate action was taken to revert to the previous version of the password manager software. A detailed analysis of the update process was conducted to identify any other potential vulnerabilities. Additionally, a comprehensive security audit was initiated to ensure that no other similar issues exist within the system. Going forward, all critical updates will undergo a more rigorous testing phase to prevent such incidents in the future.