Description

After an internal Nessus Scan was performed on CTPView 9.1R3.1, several Common Vulnerabilities and Exposures (CVEs) (9) were found.

 

This article details the steps needed to remediate these CVEs.

 

JTAC will provide the RPM tarball to resolve these security vulnerabilities as well as a script to install them. To obtain the software needed for remediation, contact Support and describe the reason for your case. JTAC will attach the required files (see below) to your case to resolve this issue.

Symptoms

A Nessus Scan revealed the following CVEs in CTPView 9.1R3.1:

 

CVE                                 Severity

 

CVE-2016-4658               Critical

CVE-2021-43527             High

CVE-2021-42574             Medium

CVE-2021-40438             Medium

CVE-2020-36385             Medium

CVE-2021-37750             Medium

CVE-2021-23840             Medium

CVE-2021-23841             Medium

CVE-2021-20271             Medium

Solution

The files needed for remediation include the following:

 

  • CTPView_9.1R3.1_CVE_Fix_1_220120_rpm_install: This is the script to install the new RPMs.

  • CTPView_9.1R3.1_CVE_Fix_1_220120_RPMs.tgz: This is the tarball of RPMs.

 

Steps to perform remediation

 

  1. SCP the above two files to /tmp on CTPView 9.1R3.1.

  2. Log in to the shell as user "juniper_sa."

  3. cd to /tmp.

  4. Type the following command: sudo chmod 777 CTPView_9.1R3.1_CVE_Fix_1_220120_rpm_install.

  5. Type the following command: ./CTPView_9.1R3.1_CVE_Fix_1_220120_rpm_install.

 

The script will install the new RPMs, and then reboot CTPView. These steps are then complete.

Modification History

2022-06-14: Added "sudo" prior to the "chmod" command
2022-12-29: Minor, non-technical edit.