Submit a ticketCall us

Have You Auto Renewed? If not, you're missing out.
The SolarWinds Renewal Program comes with a host of benefits including the most recent product updates, 24/7 technical support, virtual instructor-led training and more. Experience all of this with the convenience of Auto Renewal, and never worry about missing any of these great benefits. Learn More.

Home > Success Center > Orion Platform > Orion Documentation > Orion Platform 2017.3 Hotfix 1

Orion Platform 2017.3 Hotfix 1

Updated: September 19, 2017

Issues

SolarWinds Orion Platform 2017.3 Hotfix 1 includes the following security updates:

  • Close potential XSS vulnerabilities in the Group Description field, Last_XX_Events resource, Events page, and error page.
  • Address CVE-2017-9539.
  • Address CVE-2017-9537.
  • Address CVE-2017-9538.
  • Remove generic errors that may expose the physical server path.
  • Generate certificates for both servers and clients.
  • Log debug or warning messages when “Client usage” is not chosen in the selected certificate.

 

SolarWinds Orion Platform 2017.3 Hotfix 1 addresses the following issues:

  • Password fields allowed auto-complete.

  • The Manage Alerts page displays $ signs instead of variables.
  • Node limitations are applied incorrectly on tertiary-level hosted entities, such as application components, in container members.
  • Account limitations to display no objects are not correctly applied when viewing hosted entities in container members.
  • Borders around popups in bar graphs are bigger than the popup in Chrome.
  • Cannot add more than one variable in the mail recipients section in the Send an Email/Page alert action.
  • The bundled SNMP Walk tool is an earlier version.
  • Installations behind proxy servers may not be able to connect to Leapfile to upload diagnostic files.
  • Ok, got it dialog does not dismiss correctly.
  • NOC mode for ASA Node Details page does not load in a timely fashion.
  • ASA-related charts do not load in the Node Details’ subviews.
  • Orion Platform does not support later versions of DPAIM.
  • Toolset menus do not display in the correct area.
  • The Orion Web Console is unresponsive when hovering over Toolset buttons in the management resource.
  • The Orion Web Console does not display the top menu and shows errors on other pages when client certificate authentication is enabled in IIS.

Environment

Apply this hotfix if you run any of the following SolarWinds products: 

  • NPM 12.2
  • NCM 7.7
  • SRM 6.4
  • Patch Manager 2.1.4
  • VNQM 4.4.1
  • VMAN/VIM 8.0
  • IPAM 4.5.2
  • NTA 4.2.3
  • UDT 3.3
  • EOC 2.0
  • Toolset 11.0.6

 

Notes

  • This hotfix requires SolarWinds Orion Platform 2017.3.
  • This hotfix must be installed on the main polling engine, on any additional polling engines or web servers, and High Availability servers.
  • This hotfix addresses the issues for all SolarWinds Orion Platform products. 
  • If ALL of the following conditions are met, install this hotfix on your main server, download the Scalability Engines Installer from your main server (Settings > All Settings > Polling Engines), and use the downloaded Scalability Engines Installer to upgrade your APE, AWS, or HA server:
    • You run SAM 6.4 on SolarWinds Orion Platform 2017.3
    • The installer you used includes RC3 in the file name, for example, NCM-7.7-RC3.exe.
    • You use APE, AWS, or HA servers

Installation

  1. Use an administrator account to log in to the server that hosts your SolarWinds Orion installation.
  2. Download the hotfix from your Customer Portal.
  3. Run the Orion Service Manager, click Shutdown Everything, and close the Orion Service Manager.
  4. Run the OrionPlatform-v2017.3.5320-HotFix1.exe file, and follow the instructions in the installation wizard.

After applying this fix, the issues outlined in the description should no longer occur.

Install the Hotfix with SolarWinds HA

Important: The HA pool must be disabled to begin installation. If you install prior to 
disabling, the pool is automatically disabled.

  1. In the Orion Web Console, click Settings > All Settings > High Availability Deployment Summary.
  2. Select the pool you want to disable.
  3. Toggle High Availability to Off.
  4. Install the hotfix on the primary server in the pool.
  5. Install the hotfix on the secondary server in the pool.
  6. In the Orion Web Console, click Settings > All Settings > High Availability Deployment Summary.
  7. Select the pool you want to enable and toggle High Availability to On.

The Orion Web Console verifies all SolarWinds product versions match across the HA pair 
before enabling. If you receive errors, check your product versions.

You may need to recreate the HA pool.  For details, see Set up an HA pool.

Uninstallation

You may need to run the Configuration wizard manually after uninstalling the hotfix.

 

  1. Use an administrator account to log in to the server that hosts your SolarWinds Orion installation.
  2. Run the Orion Service Manager, click Shutdown Everything, and close the Orion Service Manager.
  3. Navigate to Control Panel > Programs > Programs and Features > View installed updates.
  4. Select "Update for SolarWinds Orion Core Services 2017.3 (HotFix1)", click Uninstall, and complete the uninstallation wizard.
  5. Select "Update for SolarWinds Information Service v2017.3.0.808 (HotFix1) click Uninstall, and complete the uninstallation wizard.

For more information, contact Technical Support at https://customerportal.solarwinds.com/.

Last modified

Tags

Classifications

Public