CVE-2024-6387 OpenSSH Vulnerability - API Layer7 Gateway

Products

• CA API Gateway

Issue/Introduction

Impact of CVE-2024-6387 OpenSSH Vulnerability on API Gateway.

Environment

All Supported Gateway versions.

Resolution

No impact for Gateway 11.0.

There is an impact with Gateway 11.1 but that is fixed and the fix is available in the July 2024 MPP.

Additional Information

Review CVE-2024-6387

As per this the version of openssl used in Gateway is not impacted by the vulnerability, API Layer7 Gateway 11.1 uses Openssh version: 1:9.2p1-2+deb12u7 (bookworm) and this is not impacted.