Guide to Securing the Analytics Plus Installation Directory
A security vulnerability that permits unauthorized access to the Analytics Plus installation directory, posing risks such as exposure of sensitive data or even rendering the product inoperable, has been identified.
This document discusses the measures to prevent unauthorized users from accessing the Analytics Plus installation directory and modifying its contents.
For New Analytics Plus Installations
From version 5300, the Analytics Plus installation directory is secured by default, granting access only to the following user accounts to ensure file security and integrity:
- Local system account
- User account used during Analytics Plus installation
- Domain admins group
- Administrators group
Important Note: If Analytics Plus is installed as a service, ensure that the account configured under the Log On tab in the service properties has Full Control permission for the installation directory.
For Existing Analytics Plus Installations
For versions earlier than 5300, please follow the steps below to prevent unauthorized users from accessing the Analytics Plus installation directory.
Windows Installation
To prevent unauthorized user access, follow the steps below.
- Download the SetPermissions file. You can either upgrade your Analytics Plus application to version 5300 or above to download the file automatically, or you can download the file manually from here.
- For manual file download, please move the downloaded file to the <Analytics Plus home>/bin folder (Home folder refers to the installation directory of Analytics Plus).
- Open the command prompt, and navigate to <Analytics Plus home>/bin folder.
- Run the SetPermission.bat file.
Linux Installation
Follow the steps below to prevent unauthorized user access to the installation directory.
- Download the SetPermissions file. You can either upgrade your Analytics Plus application to version 5420 or above to download the file automatically, or you can download the file manually from here.
- For manual file download, please move the downloaded file to the <Analytics Plus home>/bin folder (Home folder refers to the installation directory of Analytics Plus).
- Open the command prompt, and navigate to <Analytics Plus home>/bin folder.
- Run the sh SetPermission.sh command.