Symantec Siteminder Product - Concerns regarding the existence of polyfill.min.js

Products

• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• SITEMINDER

Issue/Introduction

Is Siteminder product dependent on the polyfill.min.js library?

https://github.com/polyfillpolyfill/polyfill-service/issues/2834

https://www.linkedin.com/posts/bamchenry_cybersecurity-vulnerability-javascript-activity-7167979475882745857--KOz

Location:
/opt/CA/wildfly-idm/modules/system/layers/base/org/jboss/as/console/main/hal-console-3.3.1.Final-resources.jar

Environment

Release : 12.8.x

Component : Siteminder

Component : AdminUI (SiteMinder)

Resolution

Sustaining Engineering reviewed all the blogs about polyfill.min.js, polyfill is used as a lightweight Javascript for UI purposes. After reviewing the SiteMinder, the engineering team has confirmed that Siteminder - SE is not using the polyfill.min.js library. Therefore, the SiteMinder Manager is not exposing any information and is not vulnerable.