CVE-2022-3786 and CVE-2022-3602 and 2E, PLEX

Products

• CA 2E
• CA Plex

Issue/Introduction

CVE-2022-3602 & CVE-2022-3786 were published in the National Vulnerability Database

CVE: CVE-2022-3602 - High
Base CVSS 3.1 Score: 8.5
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CVE: CVE-2022-3786 - High
Base CVSS 3.1 Score: 7.1
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C

These vulnerability is caused with the use of OpenSSL versions 3.0 and above.

Are 2E and Plex affected?

Resolution

No CA 2E and CA PLEX do not use SSL 3.x