AIM/CP upgrade to version 11.6

General
1

As per detected vulnerability in AIM ( Credential Providers ) and the remediation to upgrade AIM agents.

(CyberArk Security Bulletin CA20-15 (force.com))

When we tested it worked with reverse compatibility where AIM agent V11+ works with old driver as well without making any app level changes.

Question: Do we Need to update the application Driver with new driver information ( com.cyberark.jdbc.ASCPDriver) ? do you see any issues concerns/ JDBC connection pools in having higher version of Agent/Jar files but apps still using the same old proxy Drivers com.cyberark.aim.v550.tomcat.ASCPDriver ?

2

I don’t see any issues, but I would recommend reaching out to our Support for the official word. I would suggest testing in a DEV environment, however without approval from our Support team, you could invalidate your maintenance plan for those mismatched versions.