Security Findings For libssl Files on PIM and PAMSC

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

There was a security finding for the following files on the PIM and PAMSC endpoints, is there a newer version or can they be removed?

File: /opt/CA/PAMSCShared/lib/libssl.so
File: /opt/CA/PAMSCShared/lib/libssl.so.0.9.8
File: /opt/CA/AccessControlShared/lib/libssl.so
File: /opt/CA/AccessControlShared/lib/libssl.so.0.9.8
Installed version: 0.9.8l
Security End of Life: January 1, 2016
Time since Security End of Life (Est.):  9 years

 

Environment

Privileged Identity Manager 12.8
PAM Server Control 14.1

Resolution

The libssl files are used by the AgentManager and ReportAgent daemons in PIM and older versions of PAMSC, they cannot be removed from those endpoints.

For PAMSC, the CP6 Release Notes state that SSL communication was changed from the legacy ETPKI to WolfSSL. Upgrade any older PAMSC endpoints to the newest build which can be found on the PAMSC Compatibility Matrix. If the files exist on any endpoints running PAMSC CP6 or above, then they can be removed.

For PIM, these files cannot be removed since they are still in use by the two daemons. The endpoints will not be updated to WolfSSL since PIM 12.8 is End Of Service as of September 2025.