DX OI - CVE-2022-42889

Products

• DX Operational Intelligence
• DX OI SaaS

Issue/Introduction

CVE-2022-42889 was published in the National Vulnerability Database on 13 October, 2022. 

The vulnerability is caused with the use of Apache Commons Text 1.5 through 1.9.  

Is DX Operational Intelligence affected by this CVE?

Environment

DX SaaS

DX onpremise OI 22.x, 23.x

Resolution

For on-premise: Upgrade to 22.1, 23.x or higher versions

For SaaS: there is no impact

Additional Information

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/digital-operational-intelligence/23-3/release-notes/Whats-New.html 

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/dx-operational-intelligence-saas/SaaS/Release-Notes.html