LibWebP Vulnerability CVE-2023-4863
search cancel

LibWebP Vulnerability CVE-2023-4863

book

Article ID: 275019

calendar_today

Updated On:

Products

CA IT Asset Manager Asset Portfolio Management CA Service Desk Manager CA Service Management - Service Desk Manager CA Service Catalog

Issue/Introduction

Libwebp is a library associated with Google Chrome and a new vulnerability (CVE-2023-4863) has been identified relating to this library

Due to the Service Management solution compatibility with Chrome, is Service Management affected by this vulnerability?

Environment

Release : 17.4

Resolution

No, the Service Management engineering team including the security champion has confirmed that the library libwebp is not included in the Service Management Solution and so is not vulnerable

Additionally, the compatibility with Chrome does not make the Service Management solution vulnerable

Additional Information

CVE-2023-4863 - NIST