logo

Knowledge Base

Access official resources from Carbon Black experts

IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

CB Response: Is the Product Susceptible to CVE-2019-17495's Swagger UI Exploit?

CB Response: Is the Product Susceptible to CVE-2019-17495's Swagger UI Exploit?

Environment

  • CB Response Server: 6.x and Below
  • Swagger UI: 3.23.10 and Below

Question

Is CB Response susceptible to the Swagger UI exploit in CVE-2019-17495?

Answer

CB Response Server does not utilize the Swagger UI option by default.

Additional Notes

  • The Swagger UI function is hidden and turned off by default.
  • CB Response 7.0 Server Release will include a newer version of Swagger UI with the applied security update.

Related Content


Labels (1)
Labels:
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
CB_Support
Creation Date:
‎09-09-2020
Views:
263
Contributors
logo

Copyright © 2005-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.