IS_DXS_UMA_- Confirm Vulnerability fixed in release 23.1 Crypto Only

Products

• CA Application Performance Management SaaS

Issue/Introduction

Problems:

Security team has flagged UMA - Release 99.99.0.uma_stable (Build 51) as  exploitable for vulnerabilities using Aqua container security tool. Resources (golang.org/x/crypto, k8s.io/kubernetes).

 

   

Request:

1. Please review vulnerability and if needed provide feedback
2. Confirm fixed in UMA 23.1 release

 

Crypto vulnerability only in UMA 23.1 and later

 

Environment

Release : SAAS

Resolution

Fixed in UMA Release 2023.3