Java vulnerabilities on the Data Repository vertica host

Products

• CA Performance Management
• Network Observability

Issue/Introduction

Security scans indicate an older version of java located on the DR host in:

/opt/CA/IMDataRepository_vertica9

/opt/CA/IMDataRepository_vertica8

Can this java be updated to a current build?

Environment

DX NetOps Performance Management any version

Cause

The JRE in this directory is only used for the InstallAnywhere installer to extract things.

It's not used by any script or Vertica process.

Resolution

You can remove the /opt/CA/IMDataRepository_verticaXX directory PERMANETLY with the following commands that use the vertica9 directory as an example.

• cd /opt/CA/
• rm -rf IMDataRepository_vertica9

Additional Information

Please note, that there are some diagnostic tools in the path so it is recommended to keep the most recent /opt/CA/IMDataRepository_verticaXX directory and remove any older ones once the environment is successfully upgraded.  Keeping the most recent one will also assist when upgrading next as you will also preserve drinstall.properties.