CVE-2023-50164 - Apache Struts 2 Vulnerability and Dollar Universe

Products

• CA Automic Dollar Universe

Issue/Introduction

Are Dollar Universe Components impacted by vulnerability CVE-2023-50164?. The details about vulnerability can be found at https://nvd.nist.gov/vuln/detail/CVE-2023-50164

Can you confirm the impact of vulnerability on Dollar Universe(DU) components and any remediation measures to be undertaken?

Environment

Release : 6.x, 7.x

Component : DOLLAR UNIVERSE

Resolution

Dollar Universe(DU) components are NOT using Apache Struts 2 framework, hence it's not impacted by vulnerability CVE-2023-50164.