cadir 2.2.0.1466 vulnerability CVE-2018-0739 in VIP Authentication Hub

Products

• VIP Authentication Hub

Issue/Introduction

When running a scanning tool against the cadir application provided by VIP Authentication Hub, the tool detects the following vulnerabilities:
 
cadir :2.2.0.1466

  CVE-2018-0739 
  CVE-2018-0733
  CVE-2018-0732
  CVE-2018-5407
  CVE-2018-0734
  CVE-2018-0737

=> Upgrade libssl1.0 et libcrypto1.0

 

Resolution

The cadir is a sample application delivered for testing with the product, and that is not required for the VIP Authentication Hub to work.

The sample application will use in a future release the internal database.