Library libcrypto.so.0.9.8 Usage in PIM/PAMSC

Products

• CA Privileged Access Manager - Server Control (PAMSC)
• CA Virtual Privilege Manager
• CA Privileged Identity Management Endpoint (PIM)

Issue/Introduction

The file libcrypto.so.0.9.8 has been reported as vulnerable, but only exists on some PAMSC endpoints in the environment. How is this file used and why does it only exist on some endpoints?

Environment

Privileged Identity Manager 12.8
PAM Server Control 14.0, 14.1

Cause

The file libcrypto.so.0.9.8 was used for communication on PIM endpoints, but the communication method was changed for PAMSC endpoints. A brand new PAMSC endpoint installation would not have the file present, but endpoints which were upgraded from PIM to PAMSC may still have the file remain.

Resolution

If the PAMSC endpoint has the libcrypto.so.0.9.8 file present, it may be deleted from the server without causing impact to the endpoint.