Skip to main content

 Security

Security

PageSeeder includes security features to help organisations protect content, manage access and operate securely.

This section provides guidance for securing PageSeeder installations, information about known security vulnerabilities, and resources for reporting potential security issues.

Security advisories

Allette Systems monitors security vulnerabilities affecting PageSeeder and its third-party dependencies, including components such as Apache Tomcat.

A vulnerability in a dependency does not necessarily affect PageSeeder. Where relevant, we publish security advisories explaining our assessment, the PageSeeder versions concerned, and any recommended actions or mitigations.

These advisories can help administrators evaluate vulnerability scanner findings and determine whether updates or configuration changes are required.

View security advisories

Securing PageSeeder

The security of a PageSeeder installation depends on both the application's configuration and the infrastructure in which it operates.

We recommend that administrators:

  • Keep software updated: Install supported PageSeeder maintenance releases and apply security updates to the operating system, Java runtime, database and other components.
  • Secure network access: Use HTTPS, restrict access to internal services and ensure that reverse proxies and firewalls are configured appropriately.
  • Manage authentication and permissions: Use appropriate authentication mechanisms, enable multi-factor authentication where applicable, limit administrative privileges and regularly review access permissions.
  • Protect sensitive information: Restrict access to configuration files, credentials, backups and other sensitive data.

  • Monitor security events: Review logs regularly and investigate unexpected authentication activity or suspicious behaviour.

For detailed configuration instructions, refer to the following documentation:

Reporting security vulnerabilities

We welcome responsible disclosure of security vulnerabilities affecting PageSeeder and related Allette Systems products.

If you believe you have discovered a security vulnerability, please report it privately using the contact details and instructions in our Vulnerability Disclosure Policy .

We ask security researchers not to publicly disclose unreported vulnerabilities before we have investigated and coordinated a response.

Created on , last edited on