cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
383
Views
5
Helpful
1
Replies

TMS Struts Jakarta Vulnerability ( CVE-2017-5638 )

Steve.Milosevic
Level 1
Level 1

Afternoon Folks,

I have 50 MX/SX endpoints and all communicate to a TMS Server 13.2.2.  Gov IT had scanned the TMS server (Windows) and found that it's vulnerable to the Struts Jakarta access (CVE-2017-5638).  What do I need to know to correct this, it appears everywhere I look it's a difficult solution.

Thanks...

1 Reply 1

Patrick Sparkman
VIP Alumni
VIP Alumni

According to security advisory cisco-sa-20170310-struts2, TMS doesn't appear to be affected, however it could be that Cisco hasn't checked it yet to verify it is/isn't vulnerable. Suggest you check the security advisory for updates and if TMS either gets confirmed vulnerable or not. In either case, your TMS version is quite old, suggest you upgrade to the most recent version to take advantage of security fixes and new features.