Vulnerability concern for the XVFB (X-Window) task used by the CA 7 Web Client

Products

• CA 7 Workload Automation

Issue/Introduction

If you need to report vulnerability concerns for the XVFB X-Windows task that is used by the CA 7 Web Client flow view graphic feature, you will need to contact IBM. The XVFB task is not a Broadcom mainframe component. XVFB is part of the z/OS base.

 

Environment

Release : 12.1

Resolution

XVFB is an optional component that the CA 7 Web Client uses to render flowcharting only of the Define perspective. If you choose to stop running the XVFB task due to a vulnerability or any other reason, very minimal functionality is lost. You will not be able to render the flow view graphics. 

 

Additional Information

Xvfb X11R6.9 and is now part of the z/OS base.
Xvfb is an in-memory display server and enables a customer to run graphical applications
without a physical display device. It is especially useful when testing an X-Windows server
without using real hardware.