A Comprehensive Guide to Enhancements and Key Features Dimitris Kokoutsidis, Nov 9, 2024, CyberFM Table of Contents Introduction To top Claris has once again expanded the functionality and reliability of its flagship database server with the release of FileMaker Server 2024 Version 21.1. This latest release is packed with new capabilities aimed at enhancing network
Bypass authorization of FileMaker Server or “there is no such category” Source: https://fm-security.com/posts/bypass_auth/ CVE FileMaker Server CVE-2024-27790 Menu Introduction In the summer of 2023, I decided to investigate the internal communication protocol between FileMaker clients and the server. This led to the discovery of perhaps the most significant vulnerability in the platform’s history. I discovered that it
Jasper Schoonackers (Lesterius), Doug Wallis, and Sangita Banerjee (Claris) , Claris Community Live 6 Data breaches and cyber threats are becoming increasingly sophisticated, the security of your database systems is more critical than ever. Claris FileMaker 2024 introduces a comprehensive suite of new security features and enhancements designed to help developers, administrators, and organizations protect
Wim Decorte, Doug Wallis, Jun 13, 2024, Claris Community Live 1. Introduction Security in FileMaker development has evolved from a “nice-to-have” feature to an absolute necessity. In the third Claris Community Live event, Rosemary Tietge, along with experts Wim Decorte and Doug Wallis, walked through the most relevant security challenges, solutions, and best practices for
Wim Decorte, Jacob Taylor, Jun 11, 2024, In this blog post, we take a deep dive into the FileMaker 2024 Server (also known as FileMaker 21) Q&A session featuring experts Wim Decorte from Soliant Consulting and Jacob Taylor from RCC. This session provided a comprehensive look at FileMaker Server’s latest features, performance optimizations, and essential
Kevin Frank, May 13, 2024, FileMaker Hacks Source: https://filemakerhacks.com/2024/05/13/onwindowtransaction-json/ Demo file: on-window-transaction-json-v2.zipCredentials: admin / adminMinimum version: 20.2 [for both client and server] Note: This demo file is optimized for Perform Script on Server (PSOS), and is intended to be hosted on FileMaker Server or FileMaker Cloud. Introduction Recently a colleague mentioned that they were running into a
Claris Engineering Blog December 29, 2020 Updates: In Windows and macOS, Claris FileMaker Server versions before 19.5.2 support Custom Web Publishing (CWP) with PHP. However, PHP is no longer bundled with FileMaker Server on Windows or macOS. Additionally, CWP with PHP is deprecated starting with FileMaker Server 19.5.2. This engineering blog describes bundling PHP with FileMaker Server,
Unlocking the Secrets of the FileMaker Server Keystore: A Cryptographic Exploration Source: https://davidhamann.de/2023/05/29/deciphering-the-filemaker-keystore/ Introduction On This Page While checking out how the FileMaker Pro to Server upload feature worked, I noticed that credentials were encrypted using a RSA public key before being sent to the server. I looked into FileMaker Server’s installation directory and found that
Uncovering XXE Vulnerabilities in FileMaker’s XML Parsing Source: https://davidhamann.de/2021/11/18/filemaker-xxe-vulnerability/ CVE FileMaker Pro CVE-2021-44147 A couple of months ago I looked more deeply into the “Import Records” functionality in FileMaker, especially the XML parsing, and was wondering if any XXE vulnerability may exist and how one could exploit this in technically interesting ways. The vulnerability is/was indeed there
Wim Decorte, Claris Engage 2021 Menu 1. Introduction to FileMaker Server on Linux <a name=”#tag1″></a> During Claris Engage Beyond 2021, Wim Decorte from Soliant Consulting presented an in-depth session on Claris FileMaker Server for Linux, focusing on the benefits of deploying it on this open-source platform. Traditionally run on Windows and macOS, FileMaker Server’s expansion
Claris Engage Beyond 2021 Table of Contents Introduction <a name=”introduction”></a> In an era where data breaches and cyber attacks are becoming increasingly sophisticated and frequent, the importance of robust security measures and regulatory compliance cannot be overstated. At the recent Claris Engage Beyond 2021 event, a distinguished panel of experts from Claris and the Claris
John Newhoff, Jun 17, 2021, Portage Bay blog Source: https://www.portagebay.com/blog/filemaker-and-ransomware/ With the recent highly publicized attacks on Colonial Pipeline and JBS, we’ve had questions from some of our clients about protecting FileMaker data from ransomware attacks. While we are always careful to make it clear that we are not security professionals, we also try to do our best to answer
Templates for Zabbix 5 and 6 ClickWorks blog Source: https://www.clickworks.eu/en/monitoring-filemaker-server-with-zabbix/ Cloud, On premises and hybrid installations of FileMaker Server Claris is moving towards towards a Saas (Software as a Service) model. The strategy is Cloud first – but not Cloud only. Here at ClickWorks we fully support this. Although we also believe on-premises or “own-cloud”
Koen Van Hulle, Claris Engage 2020 Menu: Introduction: Why Cloud Security for FileMaker Server Matters #tag1 With the increasing shift toward cloud-hosted solutions, securing your FileMaker Server has never been more critical. Hosting your FileMaker solution in the cloud offers many advantages, including accessibility and scalability, but it also presents significant security challenges. At Claris
Exploring Cross-Platform Authentication with AD FS in FileMaker Server and FileMaker Cloud Wim Decorte, Apr 8, 2020, Soliant Consulting Blog Security is in Soliant Consulting’s DNA, which is why our team has been pushing so hard on exploring and documenting various ways you can securely authenticate the users who need access to your FileMaker apps.