Concur - PHP Vulnerability

MelissaInDC

Hi all,

We are urgently searching for more information regarding the PHP vulnerability and its potential impact on Concur. I've seen the statement from SAP, but we're really looking for a statement that addresses Concur specifically.

These are the questions we're trying to answer (see below). And yes, we've already opened up a ticket with Concur Support, but we've been warned we may not receive a response for several days.

"Can we get affirmative confirmation that Concur is not impacted by this PHP vulnerability? And can Concur confirm that Concur does not use PHP for any modules, including Expense, Invoice, Travel, and Reporting, or any other part of their system?"

KevinD

@MelissaInDC did you read this thread: https://community.concur.com/t5/General/Concur-PHP-Vulnerability/m-p/119566#M7188?

Thank you,
Kevin
SAP Concur Community Manager
Did this response answer your question? Be sure to select “Accept as Solution” so your fellow community members can be helped by it as well.

MelissaInDC

Thanks, Kevin! I always appreciate your replies.

I had seen that thread and what we're looking for is more specificity around Concur. I did receive a response from Concur support a short time ago and they've updated their statement to say that "If the SAP Product is not mentioned, there is no known impact," which is better.

I'm waiting to see if that statement will suffice for management.