# Security Advisory #1550 **URL:** \ **Category:** Release Notes & Downloads\ **Created:** [April 11, 2018, 7:22pm UTC](https://discuss.workflowgen.com/t/security-advisory-1550/1020 "2018-04-11T19:22:48Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![wfg-admin](https://yyz2.discourse-cdn.com/flex030/user_avatar/discuss.workflowgen.com/wfg-admin/32/714_2.png) [@wfg-admin](https://discuss.workflowgen.com/u/wfg-admin)\ **Post date:** [April 11, 2018, 7:22pm UTC](https://discuss.workflowgen.com/t/security-advisory-1550/1020/1 "2018-04-11T19:22:48Z")
We have identified a User Portal security issue where a process folder manager could potentially obtain unauthorized read access to a data file of a process, request, or action through non-standard application usage. We strongly recommend that clients that use process folder manager roles upgrade to [WorkflowGen version 7.9.1](https://discuss.workflowgen.com/t/workflowgen-7-9-1/), which includes a fix for this issue, or apply the patch for your version of WorkflowGen (see below). **Note:** This security issue is limited to users with process folder manager roles. Administrators, process supervisors, and standard users are not affected by this issue. This fix is available for the following versions of WorkflowGen. If your version isn’t listed here, please open a support ticket. - [7.8.0](http://download.workflowgen.com/product/7-8-0/update-patch-7-8-0-1550.zip) - [7.7.0](http://download.workflowgen.com/product/7-7-0/update-patch-7-7-0-1550.zip) - [7.6.0](http://download.workflowgen.com/product/7-6-0/update-patch-7-6-0-1550.zip) - [7.5.1](http://download.workflowgen.com/product/7-5-1/update-patch-7-5-1-1550.zip) - [7.4.1](http://download.workflowgen.com/product/7-4-1/update-patch-7-4-1-1550.zip) - [7.3.1](http://download.workflowgen.com/product/7-3-1/update-patch-7-3-1-1550.zip) - [7.2.1](http://download.workflowgen.com/product/7-2-1/update-patch-7-2-1-1550.zip) - [6.6.0](http://download.workflowgen.com/product/6-6-0/update-patch-6-6-0-1550.zip) - [6.5.0](http://download.workflowgen.com/product/6-5-0/update-patch-6-5-0-1550.zip) - [6.4.0](http://download.workflowgen.com/product/6-4-0/update-patch-6-4-0-1550.zip) - [6.3.1](http://download.workflowgen.com/product/6-3-1/update-patch-6-3-1-1550.zip) #### Patch installation instructions 1. Download the patch for your version of WorkflowGen and unzip it. 2. Copy and overwrite the `Advantys.Workflow.Processes.Runtime.dll` and `Advantys.Workflow.Web.UI.Portal.dll` files in the `\wfgen\bin` folder. ---
**Author:** ![pnicoll](https://yyz2.discourse-cdn.com/flex030/user_avatar/discuss.workflowgen.com/pnicoll/32/454_2.png) [@pnicoll](https://discuss.workflowgen.com/u/pnicoll)\ **Post date:** [April 12, 2018, 7:59pm UTC](https://discuss.workflowgen.com/t/security-advisory-1550/1020/2 "2018-04-12T19:59:43Z")
---
**Author:** ![pnicoll](https://yyz2.discourse-cdn.com/flex030/user_avatar/discuss.workflowgen.com/pnicoll/32/454_2.png) [@pnicoll](https://discuss.workflowgen.com/u/pnicoll)\ **Post date:** [April 24, 2018, 4:17pm UTC](https://discuss.workflowgen.com/t/security-advisory-1550/1020/3 "2018-04-24T16:17:32Z")
---
**Author:** ![pnicoll](https://yyz2.discourse-cdn.com/flex030/user_avatar/discuss.workflowgen.com/pnicoll/32/454_2.png) [@pnicoll](https://discuss.workflowgen.com/u/pnicoll)\ **Post date:** [April 24, 2018, 4:17pm UTC](https://discuss.workflowgen.com/t/security-advisory-1550/1020/4 "2018-04-24T16:17:48Z")
---
**Author:** ![pnicoll](https://yyz2.discourse-cdn.com/flex030/user_avatar/discuss.workflowgen.com/pnicoll/32/454_2.png) [@pnicoll](https://discuss.workflowgen.com/u/pnicoll)\ **Post date:** [April 24, 2018, 4:18pm UTC](https://discuss.workflowgen.com/t/security-advisory-1550/1020/5 "2018-04-24T16:18:52Z")
---
**Author:** ![pnicoll](https://yyz2.discourse-cdn.com/flex030/user_avatar/discuss.workflowgen.com/pnicoll/32/454_2.png) [@pnicoll](https://discuss.workflowgen.com/u/pnicoll)\ **Post date:** [April 24, 2018, 4:19pm UTC](https://discuss.workflowgen.com/t/security-advisory-1550/1020/6 "2018-04-24T16:19:34Z")