Specific Java Version in RSA Authentication Manager 8.7 patch 2?

[msg9]

Hello,

I need to provide some documentation for the specific version of Java included in patch 2 for RSA Authentication Manager.

The release notes say:

Patch 2 updates Oracle WebLogic Server to version 12.2.1.4

and that it addresses

AM-47675: Updated Oracle Weblogic and Java components to prevent vulnerability issues.

Anyone from RSA staff able to provide the java specifics on this, please?  Doing some reading on WebLogic in meantime.
Thanks in advance.

[RobertG · Accepted solution]

Hello @msg9,

To check the version of Java running on an AM server, the following can be done:

1. Log into the OS of AM.
2. Navigating to /opt/rsa/am/appserver/jdk/jre/bin
3. Run the following command: ./java -version

[msg9]

Hi @RobertG , thanks for the info, and apologies for dropping off on the response.  New to the communities and need to look into notifications...

Thank you for that information, that is helpful for determining the installed version.  I am tasked with finding information on the Java component version included with a particular version of RSA AM or, more specifically in this case, that version of Java included Patch 2 for RSA AM 8.7.

I am not authorized portal download access at this point, though I think that I can determine the included Java component from mount and explore of the installation or patch images?  I was able to mount 8.7.0.1.0 and browse to jdk folder to see jdk341.tar.gz.

Side note, it would be helpful for research and remediation requirement planning if this Java version information were clearly included in the Patch readme.  I was not able to find this information previously; please excuse and advise if this is now included in that documentation?

[RobertG · Accepted solution]

Hi @msg9,

No worries, and welcome to the community!

I do understand where it would be helpful to your purposes to have the specific versions of internal components used by Authentication Manager listed in the readme files. However, at this time, as the specific Java version is not publicized in the readme, I recommend opening a support case asking for the specific Java version so that it can be provided to you through that.