News

May Newsletter is available with the latest news and roadmap on the project CMDBuild, CMDBuild READY2USE and openMAINT
You can subscribe here to receive next issues in your email account.

March Newsletter is available with the latest news and roadmap on the project CMDBuild, CMDBuild READY2USE and openMAINT

You can subscribe here to receive next issues in your email account.

January Newsletter is available with the latest news and roadmap on the project CMDBuild, CMDBuild READY2USE and openMAINT.

You can subscribe here to receive next issues in your email account.

See the details and how to subscribe

We have released the new version CMDBuild READY2USE 2.3. Here below you can find the main innovations:

Integrations and improvements to the Asset Management Module:

• optimization of the choice of attributes and column width in the main data grids;
• views from pre-configured joins for displaying lists of customers / contracts / SLAs and personnel / assigned assets;
• improvements of widget and contextual menu for QR Code generation;
• “Attachment List” control report, with the list of all files uploaded into the system, for the class chosen as a parameter.

Integrations and improvements to the Service Desk and Service Management Module:

• improvements of SLA configuration and extension of configurations also for the Request Fulfillment process;
• dynamic presentation of custom attributes when opening a Request depending on the type of related service;
• improvements of the form for defining SLAs.

Integrations and improvements to the Data Reconciliation Module:

• rewriting, as part of the new waterWAY Service Bus, of the connector with Active Directory for staff synchronization;
• rewriting, as part of the new waterWAY Service Bus, of the connector with VMware VCenter for the synchronization of virtual servers;
• rewriting, as part of the new waterWAY Service Bus, of the connector with OCS Inventory for the synchronization of desktops and notebooks.

Other implementations made possible by the new features made available by the CMDBuild “core” platform:

• use of the new types of attributes available from CMDBuild 3.4 (links, files, etc.);
• improvements to visualizations on the map: info window, file fields on the form, navigation tree of the layers, etc.;
• sending “in-app” push notifications, in addition to email notifications in IT processes;
• definition of a specific layout, with only the relevant information, to be shown for closed processes.

Bug fixes

November Newsletter is available with the latest news and roadmap on the project CMDBuild, CMDBuild READY2USE and openMAINT

You can subscribe here to receive next issues in your email account.

On 30 November 2022 will take place the 7th edition of the CMDBuild DAY, a consolidated biennial event and appointment with all the users of the CMDBuild, CMDBuild READY2USEand openMAINT project. 

The maintainer Tecnoteca will present the updates on the products the best case histories.

Subscribe to participate.

You will even talk with Tecnoteca's technicians.

On October 27th 2022 at 4.00 PM (CEST time) we will present the main new features of CMDBuild 3.4.1 version.

At the end of the webinar our technicians will answer to your questions.

See the details and how to subscribe

September Newsletter is available with the latest news and roadmap on the project CMDBuild, CMDBuild READY2USE and openMAINT

You can subscribe here to receive next issues in your email account.

We have released CMDBuild 3.4.1 version.

With the release of CMDBuild 3.4,1 are now also available the new versions of CMDBuild READY2USE and openMAINT updated to the new version of the core platform.

This release was basically born as a “minor version”, to stabilize the previous 3.4 release, given the many and important innovations introduced with the 3.4 version. Over time, it has also collected numerous new features, which we anticipated in previous newsletters and that we summarize here below.

Main Data Management Module:

• search filters: possibility to define more complex advanced filters on the data cards by specifying criteria in “or” and/or “and”;
• data grids: ability to view the attributes to be included in the grid ordered by position in the card or alphabetically, automatic distinct for filters on columns on lookup values;
• views from joins: improvements in the choice and management of attributes in the configuration phase, possibility of viewing the source data cards in the consultation phase;
• contextual menu: also enabled on the rows of the card grids and workflow instances;
• relationships: multiple relationships allowed on the same domain between the same pairs of cards with different attributes of the relationship;
• relations graph: display of attributes on relations, display of relations on different domains between the same pairs of classes;
• attached document attributes: foreign key type added;
• email: viewing unread emails and notification of receipt, checking the size of attachments, chronological view, templates filtered on classes;
• schedule: possibility of multiple notifications both as email and in-app, navigation to the source card.

Administration Module:

• ability to disable sorting on some attributes (for performance reasons);
• reordering of lookup lists;
• differentiation between read/write permissions on data card TABs;
• email and in-app notification template localization;
• new interface for defining the temporal criteria for scheduling tasks;
• definition of retain criteria in the application logs.

Mobile APP:

• enabling search of cards and modification of attributes through RFID tags;
• login via RFID card.

Other news:

• extension of the service bus with support for hierarchical domains (relations on the same class);
• authentication of access to mail services: implementation of Modern Authentication by Microsoft and OAuth2 by Google;
• update of PostGIS to version 3;
• high reliability cluster: configuration improvements and optimizations.

The changelog is available for the complete list.

July Newsletter is available with the latest news and roadmap on the project CMDBuild, CMDBuild READY2USE and openMAINT

You can subscribe here to receive next issues in your email account.

May Newsletter is available with the latest news and roadmap on the project CMDBuild, CMDBuild READY2USE and openMAINT

You can subscribe here to receive next issues in your email account.

March Newsletter is available with the latest news and roadmap on the project CMDBuild, CMDBuild READY2USE and openMAINT

You can subscribe here to receive next issues in your email account.

See the details and how to subscribe

On February 17th 2022 at 4.00 PM (CET time) we will present the new  CMDBuild Service BUS "waterWAY".

At the end of the webinar our technicians will answer to your questions.

See the details and how to subscribe

January Newsletter is available with the latest news and roadmap on the project CMDBuild, CMDBuild READY2USE and openMAINT

You can subscribe here to receive next issues in your email account.

We have released the new CMDBuild 3.4 version.

From the architectural point of view, the most important innovation is the introduction of the CMDBuild Service BUS called waterWAY, a new layer that extends and reorganizes the system interoperability services: data and message flows, batch processing, input/output modules, error handling and notifications, webhooks.

New capabilities were then added in the dynamic configuration of the data model with:

• availability of new types of attributes of type links, files, formula and multi-value lookup;
• improvements to some types of pre-existing attributes: 1:1 domain reference, Markdown support, encrypted attributes.

A new IFC viewer has been integrated for the representation of 3D BIM models, based on the open-source project xeokit, which provides additional features, better documentation and a more promising roadmap.

Further minor innovations concern then:

• possibility to configure "inline" widgets on the main data card of the class;
• GIS extensions: management of permissions for geographic attributes, loading of DWG files from the map, organization of layers in a menu, information on points in the map;
• restoring the history of relationships and other minor activities.

With the release of CMDBuild 3.4, are now also available the new versions of CMDBuild READY2USE and openMAINT updated to the new version of the core platform.

On January 27th 2022 at 4.00 PM (CET time) we will present the main new features of CMDBuild 3.4 version.

At the end of the webinar our technicians will answer to your questions.

See the details and how to subscribe

Tecnoteca is pleased to announce its entry into the Zucchetti Group, leader in the Information Technology market.

The operation took place through PAT, a Zucchetti Group company, operating in the ICT field of Enterprise solutions in the CRM field and in advanced Service Management projects.

PAT and Tecnoteca, aim to create a reference pole in the Italian and international market for IT Service Management and for the automation of processes of medium and large companies.

The R&D teams of both companies, anticipating the evolutions that the market requires at an international level, aim to create new digitalization experiences in the areas of ITSM, Facility Management and automation of omnichannel processes with integrated AI.

“In a constantly evolving market, where the digitization and automation of processes for effective service management is now essential in any public or private reality, I believe that Tecnoteca’s Open Source offer identifies a concrete response to the needs of many organizations, both in the PA and in other sectors. The key that has pushed us to carry on this collaboration, in which I strongly believe, is to be able to respond in an increasingly concrete and measurable way to the objectives of companies that want to adopt an effective management of IT services or an advanced Customer Service. 
I am very happy that two realities come together to share their experiences and find new solutions to concretely respond to the challenges that the market presents to us: with the shared technological skills of over 100 professionals, who will begin to collaborate in synergy, we will identify a center of reference for capabilities and solutions, in the IT Service Management field” – said Patrizio Bof, President and founder of PAT.

“We are excited to joined the Zucchetti Group and to share the value of people, customer orientation and the continuous propensity for technological innovation. Our goal was to consolidate Tecnoteca and increase the international diffusion of our CMDBuild, CMDBuild READY2USE and openMAINT products, preserving the open source license and increasingly supporting the community that follows us. With this operation we can say that we have fully achieved this goal, guaranteeing the company’s growth and long-term stability for our customers. The close collaboration with Pat, a Zucchetti group company that operates in our own market, will allow us to improve the product offer and take advantage of commercial and technological synergies“ – said Fabio Bottega CEO of Tecnoteca.

Following a warning received regarding a security vulnerability, we deemed it necessary to produce an intermediate CMDBuild 3.3.3 version that solves the problem.

The warning refers to password management and occurs in version 3.0 and following.

We suggest to all users of CMDBuild, CMDBuild READY2USE and openMAINT to update the applications as soon as possible, and possibly to anticipate the expiration date of the passwords used in the application, for greater protection.

The description of the vulnerability will be published on this same page on Monday, January 10^th 2022, to give everyone time to install the new version.

For all instances of users who have an active Subscription, a patch has already been applied that solves the problem. Furthermore, Tecnoteca will propose the update to the CMDBuild 3.3.3 version, by contacting them directly.

-------------

Description of the vulnerability (January 10^th 2022)

To support any debugging needs, applications based on the CMDBuild platform store in a PostgreSQL DB table, subject to a "rotate" mechanism, the REST / SOAP API calls that perform the operations carried out on the system, including those corresponding to requests made from the user interface and in particular the login request.

The calls of the REST / SOAP API, in the default log level that can be modified by the system administrator, are stored together with the relative parameters.

Versions prior to the current CMDBuild 3.3.3 did not exclude from archiving, in the case of the login API, the parameter relating to the password entered by the user.

The problem did not occur in the case of login with SSO (Single Sign On), since in that case the user types the password not on the CMDBuild form but on a network authentication form.

The passwords stored in this way in the PostgreSQL database could be accessed by the database administrator via command-line SQL queries on the database server or by using a client program explicitly enabled to connect to the database server.