KB-2226 Information about the OpenSSL security advisory (CVE-2022-3786 & CVE-2022-3602)

Elly Meng — Wed, 16 Nov 2022 17:12:12 GMT

Current Revision posted to Appian Knowledge Base by Elly Meng on 11/16/2022 5:12:12 PM

On 1-Nov-2022 the OpenSSL Project published a High Severity security advisory to all organizations using OpenSSL 3.0.0 - 3.0.6.

Upon assessing the Appian platform against the details of the CVEs, we can confirm that the Appian platform is not impacted by vulnerabilities described by the OpenSSL security advisory. We will continue to monitor the situation and provide any updates as appropriate.

Additional Notes:

The following 2 CVEs were released with additional information on the scope of the vulnerabilities:

CVE-2022-3786 (“X.509 Email Address Variable Length Buffer Overflow”)
CVE-2022-3602 (“X.509 Email Address 4-byte Buffer Overflow”).

Supporting Documentation:

Affected Versions

This article applies to all supported versions of Appian.

Last Reviewed: November 16, 2022

Tags: Security

KB-2226 Information about the OpenSSL security advisory (CVE-2022-3786 & CVE-2022-3602)

Elly Meng — Tue, 01 Nov 2022 21:03:36 GMT

Revision 1 posted to Appian Knowledge Base by Elly Meng on 11/1/2022 9:03:36 PM