Product cycle
Describes information about product delivery, system vulnerabilities, system versions, etc.
Product delivery: the time to deliver the project to the user
- Version updated at: about 1~2 months to update the version, version release to the immediate delivery of software products, according to the business agreement, a working day to provide installation and deployment of software media and related documents.
- Installation and deployment time: according to the user scale and related technical requirements agreement, usually 1 day to several days.
- Business go-live time: product versions are oriented to production environment, customers can switch from test use to production environment use according to actual demand, and the business will be officially put online after the technology and environment are ready.
System vulnerability: response time after reporting, processing time after reporting
| Vulnerability list | Issue type | Risk level | Response time after reporting | Processing time after reporting |
|---|---|---|---|---|
| SQL Injection Vulnerability | Code Programming Class | High | 1 business day | 5 business days |
| Cross-Site Scripting Vulnerability XSS | Code Programming Class | High | 1 business day | 5 business days |
| The vulnerability is caused by the following vulnerabilities: - Session prediction vulnerability - Code programming class - High - 1 working day - 5 working days | ||||
| Session Management Vulnerability | Code Programming | High | 1 business day | 5 business days |
| Insecure Direct Object Reference | Code Programming | High | 1 business day | 5 business days |
| Cross-site Request Forgery | High | 1 business day | 5 business days | |
| URL Jumping Vulnerability | Code Programming | High | 1 business day | 5 business days |
| Arbitrary File Inclusion Vulnerability | Code Programming | High | 1 business day | 5 business days |
| Arbitrary File Upload Vulnerability - High - 1 business day - 5 business days | ||||
| Arbitrary File Read Vulnerability (includes Arbitrary File Download Vulnerability) | Code Programming | High | 1 business day | 5 business days |
| Unauthenticated Redirects and Forwards | Code Programming | High | 1 business day | 5 business days |
| Denial of Service Vulnerabilities | Code Programming | High | 1 business day | 5 business days |
| Component Vulnerabilities | Programming | High | 1 business day | 5 business days |
| XML Injection Vulnerability - Programming - High - 1 business day - 5 business days | ||||
| Brute Force Hacking | Code Programming | Medium | 3 business days | 15 business days |
| Automatic Form Submission | Medium | 3 working days | 15 working days | |
| Permissions Bypass | Code Programming | Medium | 3 working days | 15 working days |
| Insecure Password Recovery | Code Programming | Medium | 3 working days | 15 working days |
| Unauthorized Access Vulnerability | Code Programming | Medium | 3 business days | 15 business days |
| Improper Error Handling | Code Programming | Medium | 3 working days | 15 working days |
| URL Guessing | Code Programming | Medium | 3 business days | 15 business days |
| Sensitive Information Leakage | Code Programming | Medium | 3 working days | 15 working days |
| Directory Traversal Attack Vulnerability | Code Programming | Medium | 3 working days | 15 working days |
| Security Audit Vulnerability - Medium - 3 working days - 15 working days | ||||
| Backdoor - Programming - Medium - 3 working days - 15 working days | ||||
| System Weak Password Vulnerability | System Configuration | Medium | 3 working days | 15 working days |
| OS Command Injection Vulnerability | Code Programming | Medium | 3 working days | 15 working days |
| Server-side Request Forgery Vulnerability SSRF | Code Programming | Medium | 3 working days | 15 working days |
| Logic Vulnerability | Code Programming | Medium | 3 working days | 15 working days |
| System Configuration | Medium | 3 working days | 15 working days | |
| Function Abuse | Code Programming | Medium | 3 business days | 15 business days |
| Code Execution Vulnerability | Code Programming | Medium | 3 business days | 15 business days |
| Security Misconfiguration | Code Programming | Medium | 3 business days | 15 business days |
| Missing Audit Content Vulnerability | Code Programming | Low | 5 working days | 20 working days |
| Documentation Vulnerabilities - System Configuration - Low - 5 business days - 20 business days |
System Upgrade: Release Version Disclosure
The system supports smooth upgrade between different versions without business interruption, providing simple upgrade commands and tools.
| Release Number | Release Date | Release Notes |
|---|---|---|
| v0.6 | January 2018 | Private cloud VMware access; search optimized resource display list updated; |
| v0.7 | February 2018 | ESXi support for account management; IP initialization; |
| v0.8 | March 2018 | Dashboard optimization; support for new GPU servers; |
| v0.9 | April 2018 | Service tree; UI revamp; alert management optimization; custom enterprise information; network monitoring performance optimization; |
| v1.0 | May 2018 | Physical machine management; support for configuring raid and conversion to host; container engine support for app stores; metering and billing; service tree control panel configurable; |
| v1.2 | July 2018 | Application orchestration, definition, configuration, upgrades, etc.; Ceph storage; operation logging; security groups; billing; |
| v2.0 | August 2018 | UI 2.0; Alibaba Cloud interfacing; Billing Metering 2.0; |
| v2.1 | September 2018 | Container Content Enrichment; Load Balancing Services; Ali Server Resource Management; Snapshots; |
| v2.2 | Oct 2018 | Azure managing; heterogeneous baremetal hosts registration management; |
| v2.3 | Nov 2018 | Messages; Server image repository; operation log; UI optimization; |
| v2.4 | Dec 2018 | Public cloud AWS, Tencent Server resource management; ISO image repository support; |
| v2.5 | Jan 2019 | Billing and metering features; OpenStack host managing; annual and monthly resource pool support; this disk snapshot to create disks; |
| v2.6 | February 2019 | NFS storage support; security groups; VNC proxy support; public cloud image synchronization and server creation; |
| v2.7 | April 2019 | Virtual machine high availability; container multi-cluster support; automatic cloud account synchronization; |
| v2.8 | May 2019 | UCloud managing; tag management; permission optimization; two-factor authentication; |
| v2.9 | July 2019 | Host alert configuration; server migration; ceph-based snapshot creation; |
| v2.10 | Aug 2019 | ZStack, DStack managing; Tencent Cloud LB support; Alibaba Cloud routing table support; three-level permission settings; ticket process management; dictionary settings; system initialization guidance; open source product documentation; |
| v2.11 | October 2019 | AWS, Huawei Cloud LB support; object storage support; elastic NIC; Snapshot Policies; Server expiration release; CAS single sign-on support; navigation bar revamp; |
| v2.12 | November 2019 | Huawei Cloud, Alibaba Cloud Redis and RDS nano-management; generic ticket support; Server expiration release, cloning features; anti-affinity groups; baremetal hosts nano-management support for active detection; GPU pass-through device batch association unbinding; image usage logic optimization; |
| v2.13 | January 2020 | Ctyun Cloud and Google Cloud information synchronization; tag enhancement; host templates |
| v3.0 | January 2020 | Product containerized deployment |
| v3.1 | March 2020 | Skyward and Google Cloud resource nano-management; host templates to create Servers directly; built-in private cloud support for VPC; global resource search; unified public cloud billing nano-management; |
| v3.2 | June 2020 | Elastic scaling groups; custom list support for tags; public cloud Server public IP to EIP; system high availability; notification channel support for Dingtalk and Lark; system boot optimization; cloud account support for proxy connections; control panel support for default templates, etc. |
| v3.3 | August 2020 | Bi-directional synchronization of local and cloud projects; Timed tasks; KVM Server support for source and target checking; OpenStack Server cross-host migration; Redis, RDS expiration release; Custom product feature display; Automated deployment of highly available clusters; Built-in private cloud support for EIP; |
| v3.4 | October 2020 | Internationalization support; theme setting; SAML, OpenID, OAuth2 and other authentication source protocol support; integration of external ticket Jira; monitoring large page; unified monitoring alert; service orchestration; resource optimization recommendations; OpenStack LB, routing table managing; AWS, Tencent Cloud DNS managing; k8s Multi-cluster resource management; OpenShift container cluster managing; notification channel support for WeCom; public cloud sub-account management; |
| v3.6 | December 2020 | Support for ARM architecture; nano-management of Alibaba Cloud financial cloud; nano-management of Apsara cloud; monitoring alert optimization; Tencent cloud RDS, Redis managing; Alibaba Cloud DNS managing; policy control menu display; SAML password-free login to the public cloud; object storage support for CDN, static websites, authorization policies, etc.; |