CVE-2024-29510 (Ghostscript) Impact with Clarity, ConnectAll, Rally

Products

• Clarity PPM On Premise
• Clarity PPM SaaS
• ConnectALL
• ConnectAll On-Prem
• ConnectAll SaaS
• Rally On-Premise
• Rally SaaS

Issue/Introduction

Are ValueOps Products (Clarity, Rally and ConnectAll) Impacted with CVE-2024-29510 (Ghostscript)?

Environment

All Supported Clarity, Rally and ConnectAll versions

Resolution

• Clarity doesn't do document conversion and there are no references of Ghostscript in the code. 
• ConnectAll doesn't use Ghostscript in the code. 
• Rally doesn't use Ghostscript in the code.

Additional Information

NIST NVD - CVE-2024-29510

Attackers Exploiting Remote Code Execution Vulnerability in Ghostscript - SecurityWeek