News

Tecnoteca is pleased to announce its entry into the Zucchetti Group, leader in the Information Technology market.

The operation took place through PAT, a Zucchetti Group company, operating in the ICT field of Enterprise solutions in the CRM field and in advanced Service Management projects.

PAT and Tecnoteca, aim to create a reference pole in the Italian and international market for IT Service Management and for the automation of processes of medium and large companies.

The R&D teams of both companies, anticipating the evolutions that the market requires at an international level, aim to create new digitalization experiences in the areas of ITSM, Facility Management and automation of omnichannel processes with integrated AI.

“In a constantly evolving market, where the digitization and automation of processes for effective service management is now essential in any public or private reality, I believe that Tecnoteca’s Open Source offer identifies a concrete response to the needs of many organizations, both in the PA and in other sectors. The key that has pushed us to carry on this collaboration, in which I strongly believe, is to be able to respond in an increasingly concrete and measurable way to the objectives of companies that want to adopt an effective management of IT services or an advanced Customer Service. 
I am very happy that two realities come together to share their experiences and find new solutions to concretely respond to the challenges that the market presents to us: with the shared technological skills of over 100 professionals, who will begin to collaborate in synergy, we will identify a center of reference for capabilities and solutions, in the IT Service Management field” – said Patrizio Bof, President and founder of PAT.

“We are excited to joined the Zucchetti Group and to share the value of people, customer orientation and the continuous propensity for technological innovation. Our goal was to consolidate Tecnoteca and increase the international diffusion of our CMDBuild, CMDBuild READY2USE and openMAINT products, preserving the open source license and increasingly supporting the community that follows us. With this operation we can say that we have fully achieved this goal, guaranteeing the company’s growth and long-term stability for our customers. The close collaboration with Pat, a Zucchetti group company that operates in our own market, will allow us to improve the product offer and take advantage of commercial and technological synergies“ – said Fabio Bottega CEO of Tecnoteca.

Following a warning received regarding a security vulnerability, we deemed it necessary to produce an intermediate CMDBuild 3.3.3 version that solves the problem.

The warning refers to password management and occurs in version 3.0 and following.

We suggest to all users of CMDBuild, CMDBuild READY2USE and openMAINT to update the applications as soon as possible, and possibly to anticipate the expiration date of the passwords used in the application, for greater protection.

The description of the vulnerability will be published on this same page on Monday, January 10^th 2022, to give everyone time to install the new version.

For all instances of users who have an active Subscription, a patch has already been applied that solves the problem. Furthermore, Tecnoteca will propose the update to the CMDBuild 3.3.3 version, by contacting them directly.

-------------

Description of the vulnerability (January 10^th 2022)

To support any debugging needs, applications based on the CMDBuild platform store in a PostgreSQL DB table, subject to a "rotate" mechanism, the REST / SOAP API calls that perform the operations carried out on the system, including those corresponding to requests made from the user interface and in particular the login request.

The calls of the REST / SOAP API, in the default log level that can be modified by the system administrator, are stored together with the relative parameters.

Versions prior to the current CMDBuild 3.3.3 did not exclude from archiving, in the case of the login API, the parameter relating to the password entered by the user.

The problem did not occur in the case of login with SSO (Single Sign On), since in that case the user types the password not on the CMDBuild form but on a network authentication form.

The passwords stored in this way in the PostgreSQL database could be accessed by the database administrator via command-line SQL queries on the database server or by using a client program explicitly enabled to connect to the database server.

On December 16th 2021 at 4.00 PM (CET time) we will introduce the data synchronization with external systems, via connectors, in CMDBuild READY2USE.

At the end of the webinar our technicians will answer to your questions.

See the details and how to subscribe

November Newsletter is available with the latest news and roadmap on the project CMDBuild, CMDBuild READY2USE and openMAINT

You can subscribe here to receive next issues in your email account.

The version 2.2 CMDBuild READY2USE has been released.

This version of CMDBuild READY2USE  includes new features for both IT operators (CMDBuild interface) and service end users (Self-Service Portal).

The most important interventions concern:

• possibility to manage the “Customer Satisfaction” following the resolution of a ticket, with the insertion, in the automatic email notification of the ticket closure, of the link to a page in the Self-Service Portal where assigning a vote and reporting a comment;
• possibility to configure the automatic closing of a ticket in “Closing status” after a preconfigured number of days, with sending an email notification to the requester;
• automatic updating of the list of services assigned to a user, following the opening of the Request for enabling/disabling services through the Self-Service Portal;
• extension of the Asset Management process with the management of consumables (by quantity rather than by name for each asset);
• completion of the Asset Management process with the possibility of configuring an acceptance step by the assignee of the new assets received, via a page in the Self-Service Portal;
• extension of the connector with the AWS cloud virtualization system (Amazon Web Services), with synchronization of information relating to databases and disks;
• activation of a new dashboard on the progress of the SLAs;
• activation of a new dashboard on Customer Satisfaction summary;
• activation of a new dashboard on statistics about the Change Management process;
• creation of new custom pages for configuring the parameters and groups for opening processes;
• graphic review of reports.

It has been then redesigned the part relating to the management of the Knowledge Management, now structured in “Topics” nested at multiple levels, which can be categorized, updated by authorized users and can be consulted in an optimized form. The KB is now connectable to any type of CI (Configuration Item) and to any IT Service Management process.

The new CMDBuild READY2USE 2.2 version uses the current CMDBuild 3.3.2 core version as base platform.

September Newsletter is available with the latest news and roadmap on the project CMDBuild, CMDBuild READY2USE and openMAINT

You can subscribe here to receive next issues in your email account.

On October 14th 2021 at 4.00 PM (CEST time) we will introduce the the Asset Lifecycle & Asset Management functional area in CMDBuild READY2USE

At the end of the webinar our technicians will answer to your questions.

See the details and how to subscribe

Tecnoteca has obtained the ISO 9001:2015 Certification.

It is an important goal, congruent with the constant growth of the Company.

A confirmation of the quality of internal process management, which is reflected in the Products and Services offered to Customers.

On September 16th 2021 at 4.00 PM (CEST time) we will introduce the CMDBuild Mobile APP.

At the end of the webinar our technicians will answer to your questions.

See the details and how to subscribe

July Newsletter is available with the latest news and roadmap on the project CMDBuild, CMDBuild READY2USE and openMAINT

You can subscribe here to receive next issues in your email account.

On June 17th 2021 at 4.00 PM (CEST time) we will introduce the the Service Desk functional area in CMDBuild READY2USE

At the end of the webinar our technicians will answer to your questions.

See the details and how to subscribe

May Newsletter is available with the latest news and roadmap on the project CMDBuild, CMDBuild READY2USE and openMAINT.

On May 20th 2021 at 4.00 PM (CEST time) we will present the new features of CMDBuild 3.3.2 version.

At the end of the webinar our technicians will answer to your questions.

See the details and how to subscribe

The version 3.3.2 of CMDBuild ha been released.

The new main features are the following:

• possibility of searching on the categories and on the metadata associated with the documents attachedto the data cards;
• possibility to set permissions on attached documents different than those of the class they belong to;
• possibility to download a zip file with all the attachments of a card;
• possibility of saving in the user preferences the sorting of the columns in the grids;
• export of process data as well as classes data;
• possibility in the filters on the processes to select the current step;
• email signature management;
• enabling of the contextual menu in the map page.

It has also been refactored the authentication features with:

• plugin management of the different SSO authentication available (CAS AD/LDAP, SAML 2.0, ADFS 4, OAUTH2 KEYCLOAK, etc.);
• possibility for the user to choose one of those enabled at the login;
• authentication on the APP with the same methods as authentication on the standard interface;
• possibility of consulting in the Administration Module the active authentication methods and the parameters set for each.

Finally, some slowdown points reported on version 3.3.1 have been resolved.

The CMDBuild APP has been updated to the new version.

March Newsletter is available with the latest news and roadmap on the project CMDBuild, CMDBuild READY2USE and openMAINT.

You can subscribe here to receive next issues in your email account.

On March 18th 2021 at 4.00 PM (CET time) we will introduce CMDBuild READY2USE an explore the Configuration Management module.

At the end of the webinar our technicians will answer to your questions.

See the details and how to subscribe

On February 18th 2021 at 4.00 PM (CET time) we will present the new features of CMDBuild 3.3.1 version.

At the end of the webinar our technicians will answer to your questions.

See the details and how to subscribe

January Newsletter is available with the latest news and roadmap on the project CMDBuild, CMDBuild READY2USE and openMAINT.

You can subscribe here to receive next issues in your email account.

The version 3.3.1 of CMDBuild has been released.

The most important new functionality concerns the possibility to visually create views with joins between CMDBuild classes connected through “domains” (types of relationships). Here you can find more information about this. The functionality has been developed with the contribution of IZSAM Istituto Zooprofilattico Sperimentale dell'Abruzzo e del Molise (Experimental Zooprophylactic Institute of Abruzzo and Molise).

CMDBuild 3.3.1 includes as well the following new features:

• possibility of including dynamic images in reports, useful for publishing photographs stored in the document system, creating QR codes, etc.;
• full text search in files attached to a data card (both in the Attachments TAB and in the advanced search function);
• new operators in the advanced search on classes and the possibility of using filters in the search through relationships;
• improvements in dashboards (opening the chart in a popup, downloading the chart in PNG format);
• display of some types of attachments directly in the browser (PDF files, text formats such as TXT and CSV, images);
• possibility to consult in the 3D viewer also IFC entities not imported into CMDBuild;
• contextual help that can be differentiated for each step of the workflow;
• tooltip on the cells of the data grids;
• global search in the Administration Module on classes and attributes and on Lookup lists;
• import of CSV files with multiple keys (new configuration in the Administration Module function);
• new ADFS 4 and SAML 2.0 authentication modes. SAML 2.0 functionality has been developed with the contribution of Schneider Electric USA;
• possibility to use the Attachments and Email widgets also in the first step of the workflow;
• ability to navigate between classes using any “custom page” configured in CMDBuild instead of the standard forms generated by the system.

November Newsletter is available with the latest news and roadmap on the project CMDBuild, CMDBuild READY2USE and openMAINT.

You can subscribe here to receive next issues in your email account.