We have a new vulnerability scanner which has detected vulnerabilities (CVE-2020-1934,CVE-2020-1927) in Spiceworks’ Apache installation which it says needs to be updated past version 2.4.42.

It states these vulnerabilities in Apache were published on 04/02/20.
Is there a timeframe for Spiceworks to be updated to patch these vulnerabiities?
Thanks in advance

4 Spice ups

Uh, never dude. Spiceworks for Windows has been abandoned, er, deprecated. It’s been replaced by an OVA appliance called Spiceworks HDS, and that is being actively developed. Been out for a year.

https://community.spiceworks.com/support/help-desk-server/docs/setup

Hi all, we’re already chatting about this internally but wanted to tag @spiceworks-support-team ​ so they can go through our process on this.

1 Spice up

Aha - slightly late to the party it seems! Thanks @ranhalt ​ and @sean-spiceworks ​.

Is there a Hyper-V alternative to the .ova?

1 Spice up

There is not yet a hyper-v alternative as far as it being pre-packaged - however, you could create an Ubuntu instance in Hyper-V and then install the help desk using the scripted option:

https://community.spiceworks.com/support/help-desk-server/docs/deb-install

1 Spice up