UIM security Vulnerability for Microsoft XML Parser found on server that has IM fat client

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

A vulnerability scan found that the machine that has the IM fat client installed on it shows that the msxml4 vulnerability is present.

Environment

Version: 20.4, 23.4
Component: IM fat client (Infrastructure Manager) versions prior to 20.4.8

Resolution

Versions of Infrastructure Manager prior to 20.4.8 will install:

msxml4.dll
msxml4r.dll

into the C:\Windows\SysWOW64 directory, if they are not already present. 

Upgrading to version 20.4.8 of the Infrastructure Manager will remove the reliance on these dll files.

Note: The upgrade/fresh install will not remove these files, if they are present.