hsqldb vulnerability with dx-restmon docker image

Products

• DX Application Performance Management

Issue/Introduction

Customer is using caapm/dx-restmon  image for creating RESTMON instance for their APIs.

Recently they started receiving violations from security tool stating that hsqldb.jar file needs to be updated to latest version. This lib is coming from restmon.war file in the below path from the dx-restmon image.

Path: /DX-RESTmon/restmon.war:WEB-INF/lib/hsqldb-2.5.2.jar                            

Solution: Upgrade package hsqldb to version 2.7.1 or above. 

Environment

Release :

Resolution

Suggest to use the latest release RESTMon 2.2.1

It is available from the DX SAAS download page.  

It is available under Settings -> Downloads from DX SAAS page.

RESTMon release 2.2.1 image also been pushed to docker hub

This JAR dependency has been removed in latest release of RESTMon 2.2.1 and hence this vulnerability should not be there.