Java within HPE Library and Tape Tools

[SanderG]

Hello,

Nessus Tenable scanner reports a vulnerability Oracle Java on Software HPE Library and Tape Tools

Plugin Output!

The following vulnerable instance of Java is installed on the
remote host :

Path : C:\Program Files (x86)\HPE\HPE Library and Tape Tools\jre\bin\java.exe
Installed version : 1.8.0_31

Fixed version : Upgrade to version 8.0.351 or greater

-----------------------------------------------------

Hello @SanderG,

Thank you for writing to us! 

This is a technical question, as I'm a moderator for the Community and I do not have technical expertise. Please create a new topic by utilizing the ""New Discussion"" button, so the experts can check and assist you further.  

Thanks,
Sunitha G
I'm an HPE employee.

-----------------------------------------------------

[support_s]

System recommended content:

1. HP Storageworks Command View for Tape Libraries (CVTL) v. 3.9.1 and Interface Manager Firmware v.xxxx Release Notes

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".

Thank you for being a HPE valuable community member.

[SanderG]

Goodmorning support_s , 

This does not document the solution of the issue that i'm having. 

[NarayanKK-SO]

@SanderG

Java upgrade can be performed separately. But not sure whether the LTT supports it yet. If it doesn't support. LTT can be removed and reinstalled.

Do let us know what steps were taken so far. 

[support_s]

Hello,

Let us know if you were able to resolve the issue.

If you have no further query, and you are satisfied with the answer then kindly mark the topic as Solved so that it is helpful for all community members.

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".

Thank you for being a HPE valuable community member.

[Curtis_Ballard]

I reached out to the development team and they responded that the issue with the old version of Java being highlighted in security scans is known but that the LTT implementation does not expose the vulnerabilities however Java will be updated soon.  I encouraged them to post a response in this thread but I haven't seen one yet so I'll share that information.