Vulnerability found with Java version1.8 used in A2A client 4.12.3

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Vulnerability found with A2A client 4.12.3 java version (1.8)

Vulnerable Java location found in this PAM location in PAM  : : /opt/cloakware/cspmclient__thirdparty/x64/bin/java 1.8.0__201-b09 Enhanced

Environment

Release : 4.1

Component :

Cause

Vulnerability scans flag Java 1.8 version found in PAM A2A client package as vulnerable 

Resolution

New Java version bundled with A2A 4.0.3  patches was downloaded and applied. Download and the new Java files provided as a solution patch from location - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/release-announcements/CA-Privileged-Access-Manager-Solutions--Patches/5929?r=2&r=1&r=1

1.  WindowsA2A-4.0.3.zip

2.  UNIXA2A-4.0.3.zip

Additional Information

None.