[Cache-News] Security Alert

[cache-ne...@intersystems.com]

InterSystems has encountered a critical issue with a Cache' class which
could allow an attacker to access any file on a Cache' Server. This
vulnerability is in a class which is not required on production systems.
This class is included in all releases of Cache' 5.0.

InterSystems recommends that this class be removed using one of the
following methods:

1. From Explorer
select "Namespaces-->%CACHELIB-->Classes"
Right-click on "%XML.Utils.SchemaServer"
select "Delete"

or

2. From Terminal, enter the following commands:

zn "%cachelib"
do %system.OBJ.Delete("%XML.Utils.SchemaServer")

InterSystems is working on a solution to remove this vulnerability from
future versions.