Is the Symantec Reporter product vulnerable to CVE-2023-51384?

Products

• RP-V100

Issue/Introduction

Network administrator performing security scan on internal devices.

Symantec Reporter came back as vulnerable to OpenSSH SSH Protocol Vulnerability CVE-2023-51384.

Is this valid or a false positive; if it is valid how can we mitigate or address the issue?

Environment

Reporter 11.02 (but applies to all Reporter versions).

OpenSSH.

Cause

False positive.

Resolution

SYmantec reported does not leverage the ssh-agent and is therefor not impacted by this vulnerability.