QID 105943 - Vulnerability Remediation

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)
• CA Unified Infrastructure Management On-Premise (Nimsoft / UIM)
• CA Unified Infrastructure Management SaaS (Nimsoft / UIM)

Issue/Introduction

Adobe Flash Player 

The reported  vulnerability was found in our OC server.

QID: 105943
Title: EOL/Obsolete Software: Adobe Flash Player Detected
Solution: Since Adobe no longer supports Flash Player after December 31, 2020 and blocked Flash content from running in Flash Player beginning January 12, 2021, Adobe strongly recommends all users immediately uninstall Flash Player to help protect their systems.

Please support us in confirming whether applying the solution (Uninstall the Adobe Flash Player) will affect access or some modules of the UIM Operating Console.

If it is affected, I would be grateful if you could provide us with an alternative to remedy this vulnerability at the DX UIM level.

Environment

• DX UIM OC Server 20.4.7

Cause

• Security scan

Resolution

All flash was removed from the DX UIM product when the Unified Monitoring Portal a.k.a. 'UMP' (Liferay Platform) was replaced by the Operator Console and its webapps. Removing the Adobe Flash 'Player' will not affect the Operator Console. This has nothing to do with UIM/OC any longer. This is a job for your Web Admin/Systems Team, e.g., Systems Administrator. 

"Adobe Flash Player" can safely be removed. UIM/OC doesn't contain/include or use any Flash.