{"id":5246,"date":"2013-06-27T08:13:11","date_gmt":"2013-06-27T06:13:11","guid":{"rendered":"https:\/\/staging.alainveuve.ch\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\/"},"modified":"2013-06-27T08:13:11","modified_gmt":"2013-06-27T06:13:11","slug":"remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi","status":"publish","type":"post","link":"https:\/\/www.alainveuve.ch\/en\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\/","title":{"rendered":"Remarkable statements in the security study Content Management Systems (CMS) of the German BSI"},"content":{"rendered":"<p>In the last few days, the German Federal Office for Information Security has published a study on the security of open source CMS. There has been a lot of discussion and tweeting about it. The study was written by people from ]init[, an agency that works not exclusively but primarily for <a href=\"http:\/\/www.init.de\/kunden\" target=\"_blank\" rel=\"noopener noreferrer\">companies close to the federal government<\/a>. Employees of the <a href=\"https:\/\/www.sit.fraunhofer.de\/\" target=\"_blank\" rel=\"noopener noreferrer\">Frauenhofer Institute for Secure Information Technology<\/a> are also named as authors.   <\/p>\n<p>The details of the study have already been widely commented on, so I won&#8217;t repeat them here. However, in the summary of the study, which from my point of view belongs at the beginning, there is the following remarkable passage; <\/p>\n<p><!--more--><\/p>\n<blockquote><p>&#8220;First of all, it should be noted that the open source projects under consideration have demonstrably implemented a security process. The software has a product character with a published release plan, a transparent bug tracker, etc. The implementation of a security process corresponds to the state of the art, which even many commercial software packages created under time pressure do not achieve. The resulting software is &#8211; measured by its functionality and the resulting complexity &#8211; a good choice for a service provider.&#8221;<\/p><\/blockquote>\n<p>And further:<\/p>\n<blockquote><p>The structure and information content in the publication of vulnerabilities are exemplary in Drupal, TYPO3, Joomla! (feed) and Plone&#8230;&#8221;<\/p><\/blockquote>\n<p>I am copying this section for later discussions regarding security in OpenSource CMS. You can&#8217;t say it much more clearly and directly. <\/p>\n<p>The entire study can be <a title=\"BSI study on the security of OpenSource CMS\" href=\"https:\/\/www.bsi.bund.de\/SharedDocs\/Downloads\/DE\/BSI\/Publikationen\/Studien\/CMS\/Studie_CMS.pdf?__blob=publicationFile\" target=\"_blank\" rel=\"noopener noreferrer\">downloaded here<\/a>.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the last few days, the German Federal Office for Information Security has published a study on the security of open source CMS. There has been a lot of discussion and tweeting about it. The study was written by people from ]init[, an agency that works not exclusively but primarily for companies close to the&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","_kadence_starter_templates_imported_post":false,"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"categories":[58],"tags":[],"class_list":["post-5246","post","type-post","status-publish","format-standard","hentry","category-technology"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Remarkable statements in the security study Content Management Systems (CMS) of the German BSI &#8211; Alain Veuve<\/title>\n<meta name=\"description\" content=\"In the last few days, the German Federal Office for Information Security has published a study on the security of open source CMS. There has been a lot of\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.alainveuve.ch\/en\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Remarkable statements in the security study Content Management Systems (CMS) of the German BSI &#8211; Alain Veuve\" \/>\n<meta property=\"og:description\" content=\"In the last few days, the German Federal Office for Information Security has published a study on the security of open source CMS. There has been a lot of\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.alainveuve.ch\/en\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\/\" \/>\n<meta property=\"og:site_name\" content=\"Alain Veuve\" \/>\n<meta property=\"article:published_time\" content=\"2013-06-27T06:13:11+00:00\" \/>\n<meta name=\"author\" content=\"Alain Veuve\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/x.com\/alainveuve\" \/>\n<meta name=\"twitter:site\" content=\"@alainveuve\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alain Veuve\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.alainveuve.ch\\\/en\\\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.alainveuve.ch\\\/en\\\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\\\/\"},\"author\":{\"name\":\"Alain Veuve\",\"@id\":\"https:\\\/\\\/www.alainveuve.ch\\\/en\\\/#\\\/schema\\\/person\\\/128158bb5e1a9eb87219860e57aef491\"},\"headline\":\"Remarkable statements in the security study Content Management Systems (CMS) of the German BSI\",\"datePublished\":\"2013-06-27T06:13:11+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.alainveuve.ch\\\/en\\\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\\\/\"},\"wordCount\":262,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.alainveuve.ch\\\/en\\\/#\\\/schema\\\/person\\\/128158bb5e1a9eb87219860e57aef491\"},\"articleSection\":[\"Technology\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.alainveuve.ch\\\/en\\\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.alainveuve.ch\\\/en\\\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\\\/\",\"url\":\"https:\\\/\\\/www.alainveuve.ch\\\/en\\\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\\\/\",\"name\":\"Remarkable statements in the security study Content Management Systems (CMS) of the German BSI &#8211; Alain Veuve\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.alainveuve.ch\\\/en\\\/#website\"},\"datePublished\":\"2013-06-27T06:13:11+00:00\",\"description\":\"In the last few days, the German Federal Office for Information Security has published a study on the security of open source CMS. There has been a lot of\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.alainveuve.ch\\\/en\\\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\\\/\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.alainveuve.ch\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.alainveuve.ch\\\/en\\\/\",\"name\":\"Alain Veuve\",\"description\":\"Technology | Strategy | Society\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.alainveuve.ch\\\/en\\\/#\\\/schema\\\/person\\\/128158bb5e1a9eb87219860e57aef491\"},\"alternateName\":\"alainveuve.ch\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.alainveuve.ch\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/www.alainveuve.ch\\\/en\\\/#\\\/schema\\\/person\\\/128158bb5e1a9eb87219860e57aef491\",\"name\":\"Alain Veuve\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.alainveuve.ch\\\/wp-content\\\/uploads\\\/cropped-Logo-AV-V2.png\",\"url\":\"https:\\\/\\\/www.alainveuve.ch\\\/wp-content\\\/uploads\\\/cropped-Logo-AV-V2.png\",\"contentUrl\":\"https:\\\/\\\/www.alainveuve.ch\\\/wp-content\\\/uploads\\\/cropped-Logo-AV-V2.png\",\"width\":988,\"height\":221,\"caption\":\"Alain Veuve\"},\"logo\":{\"@id\":\"https:\\\/\\\/www.alainveuve.ch\\\/wp-content\\\/uploads\\\/cropped-Logo-AV-V2.png\"},\"description\":\"Alain Veuve ist Technologie-Unternehmer mit Fokus auf K\u00fcnstliche Intelligenz, CEO und Gr\u00fcnder der Parashift AG. Er schreibt \u00fcber Technologie, Strategie und Gesellschaft.\",\"sameAs\":[\"https:\\\/\\\/www.alainveuve.ch\\\/informationen\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/alainveuve\\\/\",\"https:\\\/\\\/x.com\\\/https:\\\/\\\/x.com\\\/alainveuve\"],\"url\":\"https:\\\/\\\/www.alainveuve.ch\\\/en\\\/author\\\/veuvea\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Remarkable statements in the security study Content Management Systems (CMS) of the German BSI &#8211; Alain Veuve","description":"In the last few days, the German Federal Office for Information Security has published a study on the security of open source CMS. There has been a lot of","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.alainveuve.ch\/en\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\/","og_locale":"en_US","og_type":"article","og_title":"Remarkable statements in the security study Content Management Systems (CMS) of the German BSI &#8211; Alain Veuve","og_description":"In the last few days, the German Federal Office for Information Security has published a study on the security of open source CMS. There has been a lot of","og_url":"https:\/\/www.alainveuve.ch\/en\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\/","og_site_name":"Alain Veuve","article_published_time":"2013-06-27T06:13:11+00:00","author":"Alain Veuve","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/x.com\/alainveuve","twitter_site":"@alainveuve","twitter_misc":{"Written by":"Alain Veuve","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.alainveuve.ch\/en\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\/#article","isPartOf":{"@id":"https:\/\/www.alainveuve.ch\/en\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\/"},"author":{"name":"Alain Veuve","@id":"https:\/\/www.alainveuve.ch\/en\/#\/schema\/person\/128158bb5e1a9eb87219860e57aef491"},"headline":"Remarkable statements in the security study Content Management Systems (CMS) of the German BSI","datePublished":"2013-06-27T06:13:11+00:00","mainEntityOfPage":{"@id":"https:\/\/www.alainveuve.ch\/en\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\/"},"wordCount":262,"commentCount":0,"publisher":{"@id":"https:\/\/www.alainveuve.ch\/en\/#\/schema\/person\/128158bb5e1a9eb87219860e57aef491"},"articleSection":["Technology"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.alainveuve.ch\/en\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.alainveuve.ch\/en\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\/","url":"https:\/\/www.alainveuve.ch\/en\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\/","name":"Remarkable statements in the security study Content Management Systems (CMS) of the German BSI &#8211; Alain Veuve","isPartOf":{"@id":"https:\/\/www.alainveuve.ch\/en\/#website"},"datePublished":"2013-06-27T06:13:11+00:00","description":"In the last few days, the German Federal Office for Information Security has published a study on the security of open source CMS. There has been a lot of","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.alainveuve.ch\/en\/remarkable-statements-in-the-security-study-content-management-systems-cms-of-the-german-bsi\/"]}]},{"@type":"WebSite","@id":"https:\/\/www.alainveuve.ch\/en\/#website","url":"https:\/\/www.alainveuve.ch\/en\/","name":"Alain Veuve","description":"Technology | Strategy | Society","publisher":{"@id":"https:\/\/www.alainveuve.ch\/en\/#\/schema\/person\/128158bb5e1a9eb87219860e57aef491"},"alternateName":"alainveuve.ch","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.alainveuve.ch\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/www.alainveuve.ch\/en\/#\/schema\/person\/128158bb5e1a9eb87219860e57aef491","name":"Alain Veuve","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.alainveuve.ch\/wp-content\/uploads\/cropped-Logo-AV-V2.png","url":"https:\/\/www.alainveuve.ch\/wp-content\/uploads\/cropped-Logo-AV-V2.png","contentUrl":"https:\/\/www.alainveuve.ch\/wp-content\/uploads\/cropped-Logo-AV-V2.png","width":988,"height":221,"caption":"Alain Veuve"},"logo":{"@id":"https:\/\/www.alainveuve.ch\/wp-content\/uploads\/cropped-Logo-AV-V2.png"},"description":"Alain Veuve ist Technologie-Unternehmer mit Fokus auf K\u00fcnstliche Intelligenz, CEO und Gr\u00fcnder der Parashift AG. Er schreibt \u00fcber Technologie, Strategie und Gesellschaft.","sameAs":["https:\/\/www.alainveuve.ch\/informationen\/","https:\/\/www.linkedin.com\/in\/alainveuve\/","https:\/\/x.com\/https:\/\/x.com\/alainveuve"],"url":"https:\/\/www.alainveuve.ch\/en\/author\/veuvea\/"}]}},"taxonomy_info":{"category":[{"value":58,"label":"Technology"}]},"featured_image_src_large":false,"author_info":{"display_name":"Alain Veuve","author_link":"https:\/\/www.alainveuve.ch\/en\/author\/veuvea\/"},"comment_info":0,"category_info":[{"term_id":58,"name":"Technology","slug":"technology","term_group":0,"term_taxonomy_id":58,"taxonomy":"category","description":"","parent":0,"count":126,"filter":"raw","cat_ID":58,"category_count":126,"category_description":"","cat_name":"Technology","category_nicename":"technology","category_parent":0}],"tag_info":false,"_links":{"self":[{"href":"https:\/\/www.alainveuve.ch\/en\/wp-json\/wp\/v2\/posts\/5246","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.alainveuve.ch\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.alainveuve.ch\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.alainveuve.ch\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.alainveuve.ch\/en\/wp-json\/wp\/v2\/comments?post=5246"}],"version-history":[{"count":0,"href":"https:\/\/www.alainveuve.ch\/en\/wp-json\/wp\/v2\/posts\/5246\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.alainveuve.ch\/en\/wp-json\/wp\/v2\/media?parent=5246"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.alainveuve.ch\/en\/wp-json\/wp\/v2\/categories?post=5246"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.alainveuve.ch\/en\/wp-json\/wp\/v2\/tags?post=5246"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}