Apache ActiveMQ Vulnerability - CVE-2023-46604

Products

• CA Service Catalog

Issue/Introduction

CA Service Catalog and Apache ActiveMQ Vulnerability (CVE-2023-46604)

Environment

CA Service Catalog 17.3 RU13 and Higher

CA Service Catalog 17.4 and 17.4 RU1

Resolution

Fix has been published that upgrades ActiveMQ to 5.15.16

Support Page link available here:

APAR #: 99111956

CAZ: T6D9667.CAZ

Refer to readme file 'ReadMe_T6D9667.txt' for patch installation instructions.

As always, we recommend testing all patches in a non-PROD environment first