Hi Expert Team,
We are getting below Vulnerability for Nexus scan on AzureHCI nodes where VSA proxies are installed.
These VSA nodes are used only for HCI VM backups not VMWare.We have earlier raised one case 240809-322, but it was specific to VMware.
Now the question is how these plugins loaded when we are not doing VMware backups using this proxy.Can it be deleted manually? If deleted will it have any impact on HCI VM backups?
Plugin Name:
| SQLite < 3.50.2 Memory Corruption |
| libcurl 7.9.1 < 8.4.0 Cookie Injection |
| libcurl 7.69 < 8.4.0 Heap Buffer Overflow |
| libcurl 7.32.0 < 8.9.1 DoS (CVE-2024-7264) |
Plugin Output:
Path : C:\Program Files\Commvault\ContentStore\Base\VMWARE\VDDK\VDDK801\bin\libcurl.dll
Installed version : 7.84.0.0
Fixed version : 8.9.1
Path : C:\Program Files\Commvault\ContentStore\Base\VMWARE\VDDK\VDDK800\bin\libcurl.dll
Installed version : 7.82.0.0
Fixed version : 8.9.1
Plugin Output:
Path : C:\Program Files\Commvault\ContentStore\Base\VMWARE\VDDK\VDDK803\bin\libcurl.dll
Installed version : 8.5.0.0
Fixed version : 8.9.1
Path : C:\Program Files\Commvault\ContentStore\Base\VMWARE\VDDK\VDDK702\bin\libcurl.dll
Installed version : 7.72.0.0
Fixed version : 8.9.1
FYR:
