Is Clarity Vulnerable to CVE-2016-11024 and CVE-2016-11023?

Products

• Clarity PPM SaaS
• Clarity PPM On Premise

Issue/Introduction

In recent security scan of Clarity, it was reported of CVE-2016-11023 and CVE-2016-11024

 

Environment

Clarity 16.3.1 

Resolution

Clarity is not impacted affected by CVE-2016-11023 and CVE-2016-11024
 
Clarity bundles a modified version of odata4j-core.jar that does not contain the 2 class files that are reported as part of the CVE-2016-11023 and CVE-2016-11024