All PHP vulnerabilities identified in Clarivate products and services have now been remediated. We sought advice from third-party partners, committed additional internal resources, and brought together experts from across the organization to support the remediation. We patched the identified vulnerabilities and confirmed third-party website hosting providers have also remediated vulnerable versions of PHP and updated policies on firewalls.
There has been no negative impact to customers as a result of the identified PHP vulnerabilities, and customers do not need to take any action in respect to our products and services. Our existing strong information security protections, firewalls, permitted us to keep all Clarivate products and services live during the remediation process.
