Article ID: 120900, created on Apr 4, 2014, last review on May 11, 2014

  • Applies to:
  • Operations Automation 5.4


An end customer can manage a provider DNS zone if he has a disabled Linux Shared Hosting Security (LSH) subscription with a hosted domain in it.

The issue may effect providers with Linux Shared Hosting on Parallels Operations Automation (POA) 5.4, where the end user of the disabled subscription :

  • includes LSH
  • includes hosted domain
  • includes the activation parameter <Default Domain's Identifier> which matches the provider domain

Fixed issue

POA-84748 End customer can manage provider DNS zone


See below hotfix files for different POA versions:

Installation instructions

On all UI servers:

  1. Backup files apache.jar and apache-private.jar from {PEM_ROOT}/ui/WEB-INF/lib

  2. Replace these files with the files from the hotfix

  3. Restart the UI service

Search Words

hotfix for the POA-84748

POA-84748 - security issue.

able to manage the service provider DNS zone

hotfix for the POA-84748 - security issue


caea8340e2d186a540518d08602aa065 5356b422f65bdad1c3e9edca5d74a1ae 2554725ed606193dd9bbce21365bed4e ac82ce33439a9c1feec4ff4f2f638899 e12cea1d47a3125d335d68e6d4e15e07

Email subscription for changes to this article
Save as PDF