SAP Knowledge Base Article - Preview

3281952 - Crystal Reports for Visual Studio - Security issue in SSL dependencies

Symptom

Security scan determined issue in the following locations:

c:\program files (x86)\sap businessobjects\crystal reports for .net framework 4.0\common\sap businessobjects enterprise xi 4.0\win32_x86\libeaym32.dll

c:\program files (x86)\sap businessobjects\crystal reports for .net framework 4.0\common\sap businessobjects enterprise xi 4.0\win32_x86\ssleaym32.dll

Our customer will not use Crystal Reports unless they are provided proof that SAP has an extended support agreement with OpenSSL.org for version 1.0.2x

1) Does SAP have an extended support agreement with OpenSSL.org for version 1.0.2x and can you provide that proof so I can share it with our customer?

2) If that is not possible, does SAP have other version(s) of Crystal Reports runtime you are actively supporting that either do not use OpenSSL at all, or use a supported version of OpenSSL?

3) If that is not possible, when does SAP intend to offer a new version of the runtime with a version of OpenSSL that OpenSSL.org does support?


Read more...

Environment

Crystal Reports for Visual Studio - SP 32 and SP 33

Keywords

cr for vs, Open SSL cxlib , KBA , BI-DEV-NET , BI Software Development Kits (SDKs) - .NET or Other , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.