For Infoscale 7.4.1, vulnerabilities are reported for "TelemetryCollector"

book

Article ID: 100047981

calendar_today

Updated On:

Description

Error Message:

There are no error messages. The TelemetryCollector is flagged by security scanners for vulnerabilities. 

Cause

The vulnerabilities are reported for Java version:1.8.0_181

As seen below, InfoScale 7.4.1 uses this Java version for TelemetryCollector 

/opt/VRTSvlic/tele/jre/bin/java -version
java version "1.8.0_181"

 

Resolution

Patches are now available for Linux:

Please contact Infoscale Support to obtain the patch for Solaris 11.

Issue/Introduction

Several security scanners may flag "TelemetryCollector" as vulnerable for its Java components.