UVC: Exfiltration of Sensitive Data from Memory Dumps

Products

• CA Automic Dollar Universe

Issue/Introduction

Security ISO Experts detect "sensitive information" like login and password from the UVC user in the Memory Dump of the related Java Process.

Environment

Release : 6.x
Component : Univiewer Console

 

Resolution

Update to a fix version listed below or a newer version if available.

Fix version(s): 
Component: Univiewer.Console
Dollar Universe 6.10.41 - Released mid-July 2020

 

Additional Information

Change memory storage for passwords so that they don't appear in plain text when dumping memory.