We have security concerns in NFA from vulnerability CVE 2005-2572

Products

• Network Observability
• Network Flow Analysis

Issue/Introduction

Our security team are indicating that there are vulnerabilities in NFA from CVE-2005-2572

Resolution

This has already been resolved from Defect ID DE592894 in NFA 23.3.8.  Please see the following release notes:

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/network-flow-analysis/23-3/release-notes/fixed-issues.html#concept.dita_dffccc4e37aafcca90f52a0d259b75e6551f37ff_2338 

 

NFA servers are getting discovered in violation of the CVE-2005-2572 vulnerability. 

With this fix, NFA implements the required code changes to address the reported CVE-2005-2572 vulnerability.