CA20090806-02: Security Notice for Unicenter Asset Portfolio Management, Unicenter Desktop and Server Management, Unicenter Patch Management
{{search ? 'Close':'Search'}}

CA20090806-02: Security Notice for
Unicenter Asset Portfolio Management,
Unicenter Desktop and Server Management,
Unicenter Patch Management

Issued: August 6, 2009

CA's technical support is alerting customers to a security risk with Unicenter Asset Portfolio Management, Unicenter Desktop and Server Management, and Unicenter Patch Management. The release of Tomcat as included with the products is potentially susceptible to a cross-site scripting vulnerability. CA has issued a solution to address the issue.

Risk Rating

Medium

Platform

Windows

Affected Products

Unicenter Asset Portfolio Management 11.3

Unicenter Asset Portfolio Management 11.3.4

Unicenter Desktop and Server Management 11.2

Unicenter Patch Management 11.2

How to determine if the installation is affected

Customers can use the following technical documents to determine if an installation is affected.

Product Document
Unicenter Asset Portfolio Management TEC492816
Unicenter Desktop and Server Management TEC491323
Unicenter Patch Management TEC491323

Solution

Unicenter Asset Portfolio Management:

Follow the instructions in solution document RI09916.

Unicenter Desktop and Server Management,

Unicenter Patch Management:

Follow the instructions in technical document TEC491323.

References

CVE-2008-1232

Change History

Version 1.0: Initial Release

If additional information is required, please contact CA Support at http://support.ca.com/.

If you discover a vulnerability in CA products, please report your findings to the CA Product Vulnerability Response Team.

Chat with CA

Just give us some brief information and we'll connect you to the right CA Expert.

Our hours of availability are 8AM - 5PM CST.

All Fields Required

connecting

We're matching your request.

Unfortunately, we can't connect you to an agent. If you are not automatically redirected please click here.

  • {{message.agentProfile.name}} will be helping you today.

    View Profile


  • Transfered to {{message.agentProfile.name}}

    {{message.agentProfile.name}} joined the conversation

    {{message.agentProfile.name}} left the conversation

  • Your chat with {{$storage.chatSession.messages[$index - 1].agentProfile.name}} has ended.
    Thank you for your interest in CA.


    How Did We Do?
    Let us know how we did so that we can maintain a quality experience.

    Take Our Survey >

    Rate Your Chat Experience.

    {{chat.statusMsg}}

agent is typing