CVE-2022-42889 and Client Automation

Products

• CA Client Automation

Issue/Introduction

CVE-2022-42889 was published in the National Vulnerability Database on 13 October  2022.  More information can be found here. 

The vulnerability is caused by the use of Apache Commons Text 1.5 through 1.9. 

 

Is CA Client Automation affected by this?

Environment

All versions of CA Client Automation (CA Client Automation)

Resolution

2022-10-19: Broadcom Support and Engineering are looking into this on priority.  Please check back on this article regularly for updates.