Vulnerabilities in OpenSSL 1.0.2zp and Older on Siteminder Sharepoint Agent r12.8.x
Article ID: 447684
Updated On:
Products
Issue/Introduction
Siteminder Sharepoint Agent r12.8.x ships with OpenSSL 1.0.2zf. There have been a number of vulnerabilities published for various versions of OpenSSL 1.0.2zp an older
Environment
PRODUCT: Siteminder
COMPONENT: Sharepoint Agent
OPERATING SYSTEM: ANY
VERSION: 12.8.7 & 12.8.8
Cause
The following CVE's have been published for OpenSSL 1.0.2zp
CVE-2026-34180 "Heap Buffer Over-read in ASN.1 Content Parsing"
SEVERITY: Low
IMPACTED: OpenSSL 1.0.2 - 1.0.2zp
Remediated: 1.0.2zq
CVE-2026-42766 "Possible NULL Dereference in Password-Based CMS Decryption"
SEVERITY: Low
IMPACTED: OpenSSL 1.0.2 - 1.0.2zp
Remediated: 1.0.2zq
CVE-2026-45447 "Heap Use-After-Free in the PKCS7_verify() Function"
SEVERITY: High
IMPACTED: OpenSSL 1.0.2 - 1.0.2zp
Remediated: 1.0.2zq
CVE-2026-7383 "Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion"
SEVERITY: Low
IMPACTED: OpenSSL 1.0.2 - 1.0.2zp
Remediated: 1.0.2zq
CVE-2026-9076 "Out-of-Bounds Read in CMS Password-Based Decryption"
SEVERITY: Low
IMPACTED: OpenSSL 1.0.2 - 1.0.2zp
Remediated: 1.0.2zq
Resolution
Upgrade OpenSSL on Siteminder Agent for Sharepoint servers to OpenSSL 1.0.2zq using this KB. OpenSSL 1.0.2zq for the Sharepoint Agent is attached to this KB.
How to Verify the version of OpenSSL Installed on the Siteminder Sharepoint Agent
###### UPGRADE INSTRUCTIONS ######
LINUX
1) Copy "openssl_102zq_linux.zip" to the Sharepoint Agent Server
2) Unzip "openssl_102zq_linux.zip"
unzip openssl_102zq_linux.zip
3) Stop the Sharepoint Agent Server.
4) Navigate to the '<InstallDir>/CA/Agent-for-SharePoint/' directory.
5) Note the permissions on the contents of the '<InstallDir>/CA/Agent-for-SharePoint/SSL/bin' directory.
6) Backup either the entire '<InstallDir>/CA/Agent-for-SharePoint/SSL/bin' directory, or the following files:
<InstallDir>/CA/secure-proxy/SSL/bin/openssl
7) Copy the contents of the '/openssl_102zq_linux/bin/' folder to the '/<Intall_Dir>/CA/Agent-for-SharePoint/SSL/bin/ directory.
CONTENTS:
openssl
EXAMPLE: cp -r /openssl_102zq_linux/bin/* /<InstallDir>/CA/Agent-for-SharePoint/SSL/bin/
8) Backup either the entire '<InstallDir>/CA/Agent-for-SharePoint/SSL/lib/' directory, or the following files:
<InstallDir>/CA/secure-proxy/SSL/lib/libcrypto.so
<InstallDir>/CA/secure-proxy/SSL/lib/libcrypto.so.1.0.0
<InstallDir>/CA/secure-proxy/SSL/lib/libssl.so
<InstallDir>/CA/secure-proxy/SSL/lib/libssl.so.1.0.0
9) Copy the contents of the '/openssl_102zq_linux/lib/' folder to the '/<Intall_Dir>/CA/Agent-for-SharePoint/SSL/lib/' directory.
CONTENTS:
libcrypto.so
libcrypto.so.1.0.0
libssl.so
libssl.so.1.0.0
EXAMPLE: cp -r /openssl_102zq_linux/lib/* ./<InstallDir>/CA/Agent-for-SharePoint/SSL/lib/
10) Re-set the permissions on the copied files.
11) Re-source the environment variables;
. ./ca_sps_env.sh
13) Re-start the Sharepoint Agent.
./proxy-engine/sps-ctl start
WINDOWS
1) Copy "openssl_102zq_win64.zip" to the Sharepoint Agent Server
2) Unzip "openssl_102zq_win64.zip"
3) Stop the Sharepoint Agent server
4) Browse to the "<Install_Dir>\CA\Agent-for-SharePoint\SSL\bin\" directory in Sharepoint Agent
Default: <Install_Dir> = C:\Program Files\
5) Back-up either the '<Install_Dir>\CA\Agent-for-SharePoint\SSL\bin\' directory, or the following files:
<Install_Dir>\CA\secure-proxy\SSL\bin\openssl.exe
<Install_Dir>\CA\secure-proxy\SSL\bin\libeay32.dll
<Install_Dir>\CA\secure-proxy\SSL\bin\ssleay32.dll
6) Copy the contents of '\openssl_102zq_win64\' folder to the '<Install_Dir>\CA\Agent-for-SharePoint\SSL\bin\' directory.
CONTENTS:
openssl.exe
libeay32.dll
ssleay32.dll
7) Back-up either the '<Install_Dir>\CA\Agent-for-SharePoint\httpd\bin\' directory, or the following files:
<Install_Dir>\CA\secure-proxy\httpd\bin\openssl.exe
<Install_Dir>\CA\secure-proxy\httpd\bin\libeay32.dll
<Install_Dir>\CA\secure-proxy\httpd\bin\ssleay32.dll
8) Copy the contents of '\openssl_102zq_win64\' folder to the '<Install_Dir>\CA\Agent-for-SharePoint\httpd\bin\' directory.
CONTENTS:
openssl.exe
libeay32.dll
ssleay32.dll
9) Start the Sharepoint Agent server
Additional Information
OpenSSL 1.0.2zq remediates the following CVE's on the Siteminder r12.8.x Agent for Sharepoint:
CVE-2026-34180
CVE-2026-42766
CVE-2026-45447
CVE-2026-7383
CVE-2026-9076
CVE-2026-28388
CVE-2026-28389
CVE-2026-28390
CVE-2026-68160
CVE-2025-69421
CVE-2025-22796
CVE-2025-9230
CVE-2024-13176
CVE-2024-9143
CVE-2024-5535
CVE-2024-0727
CVE-2023-5678
CVE-2023-3817
CVE-2023-3446
CVE-2023-2650
CVE-2023-0465
CVE-2023-0464
CVE-2023-0466
CVE-2022-4304
CVE-2023-0215
CVE-2023-0286
Attachments
Feedback
