Old version of java on the Data Repository

Products

• CA Infrastructure Management
• CA Performance Management - Usage and Administration
• DX NetOps

Issue/Introduction

We found a vulnerability on the Data Repository servers.
/opt/CA/IMDataRepository_vertica*/jre/bin/java

Environment

All supported releases

Cause

The jre shipped with the Vertica install bundle is used only for the install, or subsequent uninstall.

Resolution

You may delete the directory under /opt/CA/IMDataRepository_vertica* after the install is completed, but be aware that you will not be able to run the uninstall nor various utilities if needed.  It is recommended to only keep the most recent install directory.