EM Vulnerability: Apache Hive

Products

• CA Application Performance Management (APM / Wily / Introscope)

Issue/Introduction

The following Apache Hive related vulnerabilities have been found during a scan of APM 10.7 Enterprise Manager

 

• CVE-2022-24112
• CVE-2021-45232
• CVE-2021-43557

 

Environment

Release : 10.7.0

Component : Introscope

Cause

Checking the library com.wily.ui.jfree.chart and the libraries inside the "lib" subdirectory (jcommon-1.0.12.jar and jfreechart-1.0.9.jar). These libraries are used only for drawing charts. There is nothing related to "Apache Hive" or URI manipulation or Apache APISIX Dashboard.

 

 

Resolution

These vulnerabilities have to be false positives.