CVE-2023-38545 & CVE-2023-38546 (curl vulnerabilities): Are the VIP Enterprise Gateway and VIP integrations vulnerable?

Products

• VIP Service

Issue/Introduction

Do the vulnerabilities CVE-2023-38545 & CVE-2023-38546, related to curl, affect the VIP Enterprise Gateway or other VIP integrations?

Resolution

CVE-2023-38545 - The VIP Enterprise Gateway and VIP integrations are not vulnerable to CVE-2023-38545

CVE-2023-38546 - The risk in VIP Enterprise Gateway is considered low and will be resolved in the next release scheduled for Dec. 2023. Other VIP integrations are not affected.