Does CA Process Automation 4.3 HF01 use Apache Struts?
book
Article ID: 112347
calendar_today
Updated On:
Products
SUPPORT AUTOMATION- SERVERCA Service Desk Manager - Unified Self ServiceCA Service Desk ManagerCA Service Management - Asset Portfolio ManagementCA Service Management - Service Desk Manager
Issue/Introduction
Does CA Process Automation 4.3 HF01 use Apache Struts?
Environment
CA Process Automation 4.3 HF01
Resolution
CA Process Automation 4.3 HF01 has struts.jar which contains Apache Struts version 1.2.7.
The vulnerability - CVE-2018-11776 - very specifically states it is for Apache Struts 2. This is not part of 4.3 HF01 or 4.3 SP01.