CVE-2018-16492 - Impact with Clarity

Products

• Clarity PPM On Premise
• Clarity PPM SaaS
• Clarity FedRAMP

Issue/Introduction

In the latest scan vulnerabilities CVE-2018-1649 were reported with Clarity?  

 

Environment

Clarity all supported versions

Resolution

The above mentioned vulnerabities are not conclusive and NVD assessment not yet provided.  

• CVE-2018-1649 - Clarity doesn't use extend libraries and there is no way to craft URL to view arbitrary files on the system and Clarity has guardrails against the same.