Vulnerability CVE-2021-29425 - AWI commons-io.jar files

book

Article ID: 223432

calendar_today

Updated On:

Products

CA Automic One Automation

Issue/Introduction

The following vulnerability was found with the AWI and commons-io.jar files:

CVE-2021-29425 - https://nvd.nist.gov/vuln/detail/CVE-2021-29425 - automic.repository.jar:lib/commons-io.jar, org.eclipse.osgi/xx/x/.cp/lib/commons-io.jar - affects version prior to 2.7

Cause

Medium risk/impact vulnerability with 3rd party .jar file

Environment

Release : 12.3

Component : AUTOMATION ENGINE

Resolution

As CVE-2021-29425 (commons-io.jar) is a medium risk vulnerability, this will not be fixed in 12.3 or future releases. If there's a specific use case that can be shown that presents a security risk, please open a case with Support with steps to reproduce and impact of the security risk and a fix can be re-visited.