CVE-2015-0205 in APM 10.8

Products

• CA Application Performance Management (APM / Wily / Introscope)

Issue/Introduction

Vulnerability found on Introscope APM 10.8. ID: CVE-2015-0205

 

Path             : /opt/introscope/Introscope10.8.0.27/database/lib/libssl.so.1.0.0

  Reported version : 1.0.1j

  Fixed version    : 1.0.1k

  Path             : /opt/introscope/Introscope10.8.0.27/database/lib/libssl.so.1.0.0

  Reported version : 1.0.1j

  Fixed version    : 1.0.1k

 

  Path             : /opt/introscope/Introscope10.8.0.27/database/lib/libcrypto.so.1.0.0

  Reported version : 1.0.1j

  Fixed version    : 1.0.1k

  Path             : /opt/introscope/Introscope10.8.0.27/database/lib/libcrypto.so.1.0.0

  Reported version : 1.0.1j

  Fixed version    : 1.0.1k

</plugin_output>"

Environment

CA Application Performance Management 10.8 

Resolution

The CVE-2015-0205 in APM 10.8 is resolved by removing the files.

These files come from the 10.7 upgrade when we bundle the postgres, as 10.8 we do not bundle it anymore; these files are not needed.