Security Vulnerabilities in the Java deployment.properties file

Products

• CA Performance Management - Usage and Administration
• DX NetOps

Issue/Introduction

Security found the security vulnerabilities on PM hosts regarding JRE Server and recommend remediation steps involving edits to the /etc/.java/deployment/deployment.properties file.

Does that impact product operation or functionality for DX NetOps Performance Management systems?

Can the /etc/.java/deployment/deployment.properties file on DX NetOps Performance Management systems be modified?

Cause

Nessus scanning tool uncovered vulnerabilities in the file.

Environment

All supported DX NetOps Performance Management releases

Resolution

The /etc/.java/deployment/deployment.properties file is not utilized by any DX NetOps Performance Management systems or components.

Users are free to modify or manage that file on their systems as they see fit. There would be no impact to the DX NetOps Performance Management systems or components.