Return
-
Title
Quest response to OpenSSL Security Advisory [25 March 2021] -
Description
There has been an OpenSSL Security Advisory concerning two high severity vulnerabilities:
CVE-2021-3449
CVE-2021-3450More information can be found here: https://www.openssl.org/news/secadv/20210325.txt
-
Resolution
CVE-2021-3449: The KACE Systems Management Appliance (SMA) version 11.x and KACE Systems Deployment Appliance (SDA) version 8.x leverage an affected version of OpenSSL (1.1.1d). However, the SMA and SDA are not affected by this vulnerability, as these appliances do not allow SSL renegotiation.
CVE-2021-3450: Not applicable, as the SMA and SDA are not leveraging an affected version of OpenSSL.