App Control Server Not Affected by PHP Vulnerability CVE-2025-1219

Products

• Carbon Black App Control

Issue/Introduction

Vulnerability scan shows the App Control Server contains a PHP version associated with CVE-2025-1219.

Environment

• App Control Server: 8.9.0 - 8.11.0
• PHP: Versions 8.1.* before 8.1.32

Cause

App Control Server contains a PHP version associated with CVE-2025-1219.

Resolution

An investigation determined the App Control Server is not susceptible to this CVE and no immediate action is currently required.

Additional Information

• Libraries (such as PHP) are updated with each Server release.
• Subscribe to Product Update Notifications to be alerted when a new Server release is available.
• Do not attempt to update the PHP Library or make any modifications to the PHP Library used by App Control. Doing so will cause issues accessing the Console.