Fix for Vulnerability in SOI nimsoft connector

Products

• CA Service Operations Insight (SOI)

Issue/Introduction

We are unable to install the Eclipse jetty latest version in SOI nimsoft connector server, we are trying to install this because we have a vulnerability threat. 

 

Threat & Remediation: 

Error: A JNI error has occurred, please check your installation and try again.

Error: 

Exception in thread "main" java.lang.UnsupportedclassVersionError: org/eclipse/jetty/start/Main has been compiled by a more recent version of the Java Runtime (class file version 55.0), this versio of the Java Runtime only recognizes class file version up to 52.0

[..]

 

 

 

 

Environment

Release : 4.2

Cause

You are installing Eclipse Jetty 11.0.15 downloaded from Eclipse web site. Base on the error, it looks like the problem is with the JRE you are using.

According to https://www.eclipse.org/jetty/download.php the version you are trying to install needs JRE 11 but you are running 1.8

Resolution

Installing Eclipse Jetty will not fix any vulnerability of the Catalyst Container because the container is integrated with it and will not use an outside Eclipse Jetty.

Eclipse Jetty is a third-party open-source program that Broadcom does not support.