We’ve been alerted to a security vulnerability that leaves the entire Avid Pro Tools ftp beta servers open for public download.
We have tested this and it is indeed the case, it would seem someone has not stopped the server being open to public access.
No personal data or customer data is being exposed, this is the servers that hold, amongst other things, future releases of Avid software in beta format, it also holds downloads for some third parties. You need licences to run these applications, so even with the links (which we are not publishing) a rush to download them is on the whole a pointless endevour.
This is simply a case of poor security being in place on the Avid servers, many other vendors put password controls on these servers just in case, it does not bode well for ensuring any Avid trade secrets remain that way for long.
We’ve reached out to Avid who are working to deal with this.
Comments are closed on this to prevent links being posted on this site.