Question

Is FlexNet Publisher impacted by the OpenSSL vulnerability CVE-2023-0286, CVE-2023-0215, CVE-2022-4450, and CVE-2022-4304 and, if so, when this will be fixed?

Answer

Vulnerability CVE-2023-0286, CVE-2023-0215, CVE-2022-4450, and CVE-2022-4304 are observed in FlexNet Publisher as per the scan report in the latest FlexNet Publisher version. To resolve this issue, the OpenSSL is now upgraded from OpenSSL-1.1.1s to OpenSSL-1.1.1t in FlexNet Publisher 11.19.4 which will resolve all vulnerabilities reported in FlexNet Publisher 11.19.3 (FlexNet Publisher 2023.R1).

More Information

• Vulnerability : CVE-2022-2097 and CVE-2022-2068
• https://nvd.nist.gov/vuln/detail/CVE-2023-0286
• https://nvd.nist.gov/vuln/detail/CVE-2023-0215
• https://nvd.nist.gov/vuln/detail/CVE-2022-4450
• https://nvd.nist.gov/vuln/detail/CVE-2022-4304