3

I am trying to install Security Bulletin SC2023-002-576660 hotfix over the XP 9.3 and 10.3 instances. We have multiple Sitecore core server roles (CM, CD, Processing, Reporting, EXM Dispatch).

Do we need to install/sync same hotfix over the Processing and Reporting core role and is there any impact?

Improve this question

1 Answer 1

Reset to default
1

Yes, the issue impacts all Sitecore XP Core server roles (Content Delivery, Content Management, Reporting, Processing, EXM Dispatch). Apply the solution to different roles. Refer FAQ section here

The bulletin outlines two approaches to resolve the vulnerability:

  1. Applying as a hotfix

  2. Applying as a patch

The main difference between these two options is that the patch only fixes the known attack vector (a specific method or pathway that cybercriminals have been observed using to exploit vulnerabilities in software or systems). At the same time, the hotfix addresses the vulnerability more comprehensively - covering scenarios beyond the known attack vector. Due to this critical difference, Sitecore strongly recommends applying hotfixes rather than installing the patch.

Reference: https://www.sitecoregabe.com/2023/04/sitecore-security-bulletin-hotfix-vs-patch.html

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.