LibWebP Vulnerability CVE-2023-4863

Products

• CA IT Asset Manager Asset Portfolio Management
• CA Service Desk Manager
• CA Service Management - Service Desk Manager
• CA Service Catalog

Issue/Introduction

Libwebp is a library associated with Google Chrome and a new vulnerability (CVE-2023-4863) has been identified relating to this library

Due to the Service Management solution compatibility with Chrome, is Service Management affected by this vulnerability?

Environment

Release : 17.4

Resolution

No, the Service Management engineering team including the security champion has confirmed that the library libwebp is not included in the Service Management Solution and so is not vulnerable

Additionally, the compatibility with Chrome does not make the Service Management solution vulnerable

Additional Information

CVE-2023-4863 - NIST