Nessus Plugin 168365 CVE-2022-41946

Products

• CA Application Performance Management (APM / Wily / Introscope)

Issue/Introduction

Nessus Plugin 168365 CVE-2022-41946.

Nessus Plugin 168365 CVE-2022-41946
PostgreSQL JDBC Driver 42.2.x < 42.2.27 / 42.3.x < 42.3.8 / 42.4.x < 42.4.3 / 42.5.x < 42.5.1 Information Disclosure
Severity Medium

Paths: 
/opt/wily/Introscope10.7/EM/install/database-scripts/lib/postgresql-42.2.18.jar    
/opt/wily/Introscope10.7/MOM/install/database-scripts/lib/postgresql-42.2.18.jar  

Installed version: 42.2.18  
Fixed version: 42.2.27  
Recommended Solution: Upgrade to PostgreSQL JDBC Driver version 42.2.27; 42.3.8; 42.4.3; 42.5.1; or later

When it will be addressed by Broadcom?

Environment

Release : 10.8

Resolution

The target release for the permanent fix is the 10.8 SP1. The release is delayed as we have few release blockers. We are currently working on identifying the root cause for these defects.

As of now we do not have a Target date for these defects and hence no release date.