PCNS Jetty webserver security

[Anonymous user]

Hello,

I have been using PCNS 3.0 and 3.0.1 under Windows Server 2003 x86 to allow a number of servers to shutdown when instructed by a single UPS fitted with an AP9619 management card and this all works fine. However the people in charge of our security accreditation don't like the fact that it uses an old version of the Jetty java webserver, version 6.1.26, which has known security vulnerabilites. They would like us to upgrade to a recent stable version such as 8 or 9. Does anyone know if there is a newer version of PCNS that might have this included or if it is possible to upgrade the JAVA/Jetty versions within PCNS 3.0.1?

Thanks,

Ian

[BillP · Accepted solution]

Ian,

The Jetty associated with PCNS cannot be upgraded. We are presently working on PCNS version 3.1 and hope to release it in October. The plan is to have version 3.1 address known Jetty security issues.