Apache HTTP Web Server Vulnerabilities and Identity Manager Compatibility

Products

• CA Identity Manager

Issue/Introduction

This article clarifies the architectural dependency between Broadcom Identity Manager and the Apache HTTP Web Server.

Environment

Identity Manager 14.5

Cause

Broadcom Identity Manager does not natively require an Apache HTTP Web Server for core product operation. If an Apache HTTP Web Server is present in your environment, it is likely deployed to serve as a proxy or to support Single Sign-On (SSO) integrations, such as a SiteMinder Web Agent.

Resolution

1. Determine the Integration: If you have an Apache HTTP Web Server in your Identity Manager environment, verify if it is being used for a Web Agent or proxy integration.
2. Vulnerability Management: Because Identity Manager does not manage the Apache HTTP Web Server, you are responsible for patching and managing vulnerabilities on that server independently.

Additional Information

For any vulnerability associated with Apache HTTP Web Server, please refer to the Apache HTTP website.

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.