Are Privileged Identity Manager (a.k.a PIM) and Privileged Access Manager Server Control (a.k.a PAMSC) affected by CVE-2023-24998?
This vulnerability is caused by Apache Commons FileUpload 1.0-beta-1 to 1.4.
Do PIM and PAMSC use this sub-module?
Vulnerability information is here:
NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-24998
CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24998
[SECURITY] CVE-2023-24998 Apache Commons FileUpload - DoS with excessive parts
https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy
Release : All
PIM/PAMSC, ServerServer Refresh version, does not affect this vulnerability.