CVE-2021-44790 Issue and the impact of the PIM Server

Products

• CA Privileged Identity Management Endpoint (PIM)

Issue/Introduction

Please check whether the PIM product has an effect on the vulnerability of CVE-2021-44790

Environment

Release : 12.8

Component : CA ControlMinder

Cause

Vulnerability check for CVE-2021-44790 on PIM Server.

Resolution

PIM R12.8 and PIM R12.9 ENTM sever is not impacted with CVE-2021-44790, since Apache HTTP is used as an external load balancer and a new version of Apache HTTP server can be used.

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/privileged-identity-manager/12-8-01/implementing/how-to-configure-the-apache-load-balancer.html