Security Compliance

SEM Legacy Console: Adobe Flash End-Of-Life

This article details what is going on with Flash and possible workarounds as it affects all versions of the SEM and LEM.

First published date

1/11/2021 8:20 PM

Last published date

1/26/2022 11:30 AM

Overview

Adobe Flash which is used as part of the FlexUI in the SEM Legacy Console has reached End-Of-Life and discontinued. Adobe and their partners are pushing updates that will effectively prevent all Flash-based applications from running.

Product section

Security Event Manager

Cause

Adobe announced the Flash and its related technologies are End-Of-Life and discontinued support for them on December 31, 2020. The End-Of-Life announcement for Flash is here: https://www.adobe.com/products/flashplayer/end-of-life.html  (© 2017 Adobe, obtained on January 2021)

Starting on January 12th, 2021, Adobe and its partners will begin pushing updates intended to disable the software and prevent any Flash-based content or application from running.

Depending on what web browser you are using and your internal update policy you may no longer access the SEM Legacy Console by using the link from the HTML5 interface or accessing it directly via the HTTPS://[HOSTNAME_IP:8443/lem/ URL after this date.

The following outlines what will occur starting on the 12th:


Adobe

  • All standalone Flash Player installs will receive an update to disable it from running and only allowing an uninstall starting on January 12th, 2021
Source: https://helpx.adobe.com/flash-player/release-note/fp_32_air_32_release_notes.html  (© 2020 Adobe, obtained on January 2021)


Microsoft

  • Internet Explorer: Internet Explorer still will support the Adobe Flash Player plugin however, Adobe's update will prevent it from working.
  • Microsoft Edge (EdgeHTML Version): The EdgeHTML version of Microsoft Edge makes use of the standalone plugin and will also be affected by Adobe's update.
  • Microsoft Edge (Chromium Version): Edge Chromium includes a built-in Flash Player (Pepper) plugin however it is disabled by default. This plugin will be removed from Edge Chromium in a future update to align with other Chromium-based browsers
  • Microsoft will publish a Windows Update (KB4577586) that will remove any version of Flash Player installed.
Source: https://docs.microsoft.com/en-us/lifecycle/announcements/adobe-flash-end-of-support  (© 2020 Microsoft, obtained on January 2021)


Mozilla

  • Firefox makes use of the standalone Flash Player Plugin. Adobe's update will prevent Flash Player from running.
  • Full support for running the plugin at all will be removed from Mozilla Firefox on January 26th, 2021 when Mozilla releases Firefox version 84
Source: https://blog.mozilla.org/futurereleases/2020/11/17/ending-firefox-support-for-flash/ (© 2020 Mozilla, obtained on January 2021)


Google

  • Google Chrome makes use of a built-in Flash plugin (Pepper) however it has been disabled by default.
  • The Flash Plugin will be removed from both Chrome and ChromeOS on January 19th with the release of Chrome version 88.
Source: https://www.blog.google/products/chrome/saying-goodbye-flash-chrome/, https://www.chromestatus.com/feature/5643527180517376 (© 2020 Google, obtained on January 2021)


Chromium Project

  • Chromium makes use of a built-in Flash plugin (Pepper) however it is disabled by default.
  • The Flash Plugin will be removed from the Chromium browser on January 19th with the release of Chromium 88.
Source: https://www.chromium.org/flash-roadmap, https://www.chromestatus.com/feature/5643527180517376 (© 2020 Mozilla, obtained on January 2021)


Apple

  • Apple removed support for running Flash with the release of Safari 14 as part of MacOS 11 (Big Sur).
  • Prior versions of Safari made use of the standalone Adobe Flash Plugin. Adobe's update will prevent Flash from running in these older versions.
Source: https://developer.apple.com/documentation/safari-release-notes/safari-14-release-notes (© 2020 Apple, obtained on January 2021)
 

All Others

  • Flash has been implemented in other browsers using various methods. They may be affected by Adobe's standalone update.
  • Please check with your browser vendor to determine Flash Support

Resolution

With the release of Security Event Manager (SEM) 2020.4, Solarwinds have built a fully HTML5-based WebUI to replace the Flash-based Legacy Console. You can read about the new SEM Console as part of our Admin Guide here: https://documentation.solarwinds.com/en/Success_Center/SEM/Content/Admin_Guide/New_In_6_8/SEM-Events-Console-Tabs.htm

It is recommended that you upgraded your SEM appliance to the latest version as soon as possible to continue managing your SEM appliance.

If you are not able to upgrade your SEM appliance at this time you may wish to install the SEM Standalone Console which implements a version of the Legacy Console. You can read more about installing the Standalone (Air) Console here: https://support.solarwinds.com/SuccessCenter/s/article/Install-LEM-Adobe-Air-Console?language=en_US


Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment.  You elect to use third party content at your own risk, and you will be solely responsible for the incorporation of the same, if any.