How to Remediate CWE 79 "Cross-site Scripting" vulnerability found against SOI's Connector Accelerator v 1.3.1

Products

• CA Service Operations Insight (SOI)

Issue/Introduction

How to Remediate CWE 79 "Cross-site Scripting" vulnerability found against SOI's Connector Accelerator v 1.3.1

Resolution

Attached is an updated connaccel.catalyst.connector.jar which addresses the CWE issue 

To deploy do the following:

1) Stop SOI Integration Services

2) Make a backup of the existing connaccel.catalyst.connector.jar in <SOI>/lib (don't rename it - move it to another a directory)

3) Copy the new .jar file into <SOI>/lib

4) Restart IntegrationServices