API Portal and Java vulnerability (CVE-2018-2942)

Products

• CA API Developer Portal
• CA API Gateway

Issue/Introduction

Is API Developer Portal 3.1 affected by CVE-2018-2942 - Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL)?

Environment

Release:
Component: APIPRD

Resolution

No, it isn't.
API Developer Portal 3.x is supported on Red Hat Enterprise Linux version 6.5. CVE-2018-2942 affects to Oracle Java SE on Windows only.

Additional Information

• https://docops.ca.com/ca-api-developer-portal/3-1/en/set-up-the-api-portal/prerequisites-for-setting-up-the-api-portal
• https://docops.ca.com/ca-api-developer-portal/3-5/en/set-up-the-api-portal/install-and-configure-ca-api-developer-portal-software