Java vulnerabilities on the Data Repository vertica host

Products

• CA Performance Management - Usage and Administration
• DX NetOps

Issue/Introduction

Security scans indicate an older version of java located on the DR host in:

/opt/CA/IMDataRepository_vertica9/

Can this java be updated to a current build?

Cause

The JRE in this directory is only used for the InstallAnywhere installer to extract things.

It's not used by any script or vertica process.

Environment

Release : 20.2

Component : IM Data Storage

Resolution

Please copy:

/opt/CA/IMDataRepository_vertica9/drinstall.properties

To a new location and note where you saved it.

This file will be used for future upgrades.

Then feel free to delete the

/opt/CA/IMDataRepository_vertica9/

Directory.

Additional Information

Please note, there are some diagnostic tools in that path, but if a problem is encountered and we need to use those tools, you can always copy the media back to the host.

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/performance-management/3-7/administrating/data-repository-administration/run-data-repository-diagnostic-utilities.html