SynergyCP Temporarily Unavailable
-
Investigating
Due to two newly disclosed PHP CVEs released today, we have temporarily taken our SynergyCP platform offline as a precaution while we review the vulnerabilities and confirm our environment is protected. During this time, customers will have limited server interaction through SynergyCP. This does not mean your servers are offline; access and management functions provided through SynergyCP are temporarily unavailable. These vulnerabilities affect PHP globally and are not specific to Dedicated.com or SynergyCP. We are actively reviewing the disclosures and will restore access once we are confident it is safe to do so. We will provide additional updates as they become available. Thank you for your understanding.
-
Identified
We have received additional information from the SynergyCP team confirming they are actively monitoring the PHP vulnerability and are preparing updated SynergyCP builds as soon as the patched PHP release becomes available. We will apply the updated build as soon as SynergyCP releases it and restore access once the update has been successfully deployed. SynergyCP will remain temporarily unavailable in the meantime as a precaution. Your servers remain online and unaffected. We will continue to provide updates as we have them.
-
Identified
The PHP patches have been released, and the SynergyCP team is waiting for the updates to trickle down into the images used by the application. Once the updated SynergyCP versions are released, we'll apply them to our deployment, and SynergyCP will be available again. We'll update this posting as we have more information.
-
Monitoring
SynergyCP is patched and back online. We're working through new orders, suspended servers, etc.
-
Resolved
This is complete and we're closing out this incident. If we missed something, please accept our apologies, and bump your existing ticket or open a new one and we'll attend to it as soon as we can.