(CVE-2023-48795)SSH Prefix Truncation Vulnerability (Terrapin)

Products

• CA Identity Suite

Issue/Introduction

The customer received a vulnerability in CA IAM VAPP through a Security scan done by Qualys.

Environment

Vapp 14.5 SP1

Cause

Vulnerability Scan

Resolution

The CP-OS patches are OS version based, Centos8 and Centos9, all these CP-OS patches are cumulative in nature and will contain all fixes previously available. You can download and apply the latest CP-OS patch based on the OS version and this should install the latest security updates.

Reference Link:

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-suite/14-5/release-notes/Virtual-Appliance-Release-Notes/Latest-Operating-System-Security-Patch.html

Additional Information

Reference Defect:

DE619189