Symantec Access Management

 View Only
  • 1.  Java Vulnerability reported on WebAgent R12.52SP1CR10

    Posted Feb 13, 2020 01:06 PM
    Hi All,

    I could see the WebAgent latest version is R12.52SP1CR10 but still the Java version has only 1.8.0_162 which is reported as strong vulnerable.

    Could you please let me know if Broadcom/CA has any plan for releasing new CR with latest java in it?

    ------------------------------
    Thanks,
    Karthik
    ------------------------------


  • 2.  RE: Java Vulnerability reported on WebAgent R12.52SP1CR10

    Posted Feb 14, 2020 07:33 AM
    Hi Team,

    Can someone reply on this?

    We would need to remediate this vulnerable asap.


  • 3.  RE: Java Vulnerability reported on WebAgent R12.52SP1CR10

    Posted Feb 20, 2020 10:51 AM
    Hi Broadcom,

    Appreciate if anyone could reply to this post so that we can work on the remediation...


  • 4.  RE: Java Vulnerability reported on WebAgent R12.52SP1CR10
    Best Answer

    Broadcom Employee
    Posted Feb 21, 2020 09:22 AM
    Hi Karthik,
    Please contact Broadcom Customer Support.  My guess is that the java library is an embedded element in the Install Anywhere installer, but customer support is the right starting place for assistance.