Change Guardian 6.2.1.0 Release Notes

1.1 OpenSSL Fix

This release resolves an issue where a vulnerability in OpenSSL certificate parsing leaves systems open to denial-of-service attacks.(CVE-2022-0778)

2.1 Change Guardian Web Login Page does not Allow Pasting of Password

Issue: The Change Guardian Web Login page does not allow pasting of password and the users need to type the passwords manually. (Defect 483062)

Fix: The users can use the ‘paste’ functionality to enter the passwords in the web login page.

2.2 Change Guardian Web Login Page does not Allow Passwords with Specific Special Characters

Issue: Change Guardian Web interface login page does not allow/accept passwords with the special character ‘&’. (Defect 482023)

Fix: Passwords with the special character ‘&’ are accepted.

2.3 License Import does not Reflect the ‘Never Expires’ Key

Issue: When a user tries to import an application license key with the expiry date set to ‘Never Expires’, the license import does not update the License Valid Upto timelines or shows an older date.(Defect 495286)

Fix: Application license imports with License Valid Upto option reflecting ‘Never Expires’.

2.4 License Import Fails if the File Name contains Space

Issue: When a user tries to import a license with file name containing space as a character, the file is invalidated and the import fails.(Defect 494035)

Fix: License with file name containing space imports successfully.

2.5 Auditing Flags are Missing in ACE SACL

Issue: When the user tries to monitor policy, the auditing flags <\flag_value> in ACE SACL for <directory_path> report error.(Defect 495315)

Fix: The auditing flags are now properly reporting SACL checks.

6.1 UNIX Agent goes Offline after Installing on SLES Platform

Issue: When you import and assign UNIX policies using the latest version of policy editor, the Change Guardian Agent for UNIX 7.6.4.1 shows offline after few hours.(Defect 500024)

Workaround: Delete the imported policies that were created using the previous version of Policy Editor and recreate them using the current version.

6.2 Windows Agent Upgrade to 6.2.x.x fails

Issue: When you install Windows Agent 6.1, 6.1.0.1, or 6.0 and upgrade it to a newer version, the upgrade fails with the message Failed to install NetIQChangeGuardianAgent.msi. (Defect 479131)

Workaround: Remove/delete assets from the Agent Manager. Add the assets again and install a new version of the agent package. After installing the new version, reassign the policy to the Agent.

6.3 Common Appliance Framework Page Shows Error RemoteLookupFailureException

Issue: Upon launching, the CAF page fails to load and shows RemoteLookupFailureException error.(Defect 379090)

Workaround: Restart the datamodel service on the Change Guardian Appliance server with: rcvabase-datamodel restart. Ensure that it shows active (running) with: rcvabase-datamodel status and open the Change Guardian Appliance Management Console Page with: https://IPAddressOfServer:9443.

6.4 Events Do Not Show Command Line Details

Issue: If a process is terminated within a second of its creation, the Change Guardian Agent for Windows cannot collect the command line details such as Command Line, Command Line Length, Command Line Parameter, and Command Line Parameter Length. Events that are generated for these processes do not display the command line details.(Defect 292163)

Workaround: None.

6.5 FIPS Enabled Solaris Agent Shows Offline in Agent Health Tab

Issue: When you assign policies to Solaris UNIX Agent machine, the VigilEntAgent service may go down. (Defect 353077)

Workaround: When the server receives the next heartbeat, the Agent turns online and sends events normally.

6.6 Appliance Reports Errors During Boot

Issue: When the Change Guardian appliance boots after installation, the appliance reports that some services have failed to start: (Defect 174273)

Failed to start LSB: NetIQ LDAP Expander.
Failed to start LSB: Sentinel Server.

Workaround: The services start correctly. You can ignore such error messages.

6.7 Launching Alerts Dashboard Displays Conflict Error Message in FIPS Mode

Issue: After installing or upgrading Change Guardian in FIPS mode, when you launch Alerts Dashboard for the first time, a conflict error message is displayed. (Defect 302233)

Workaround: Refresh the page and ignore the conflict error message as there is no functionality impact.

6.8 Events Do Not Show the Windows Process Description

Issue: The assembly path for certain Windows processes is not available to the Change Guardian Agent for Windows, due to which the agent cannot collect the Windows process description. Events that are generated as a result of such processes do not display the process description.(Defect 290154)

Workaround: None.

6.9 Internet Explorer 11 Does Not Save Events Dashboard Customizations

Issue: If you use certain versions of Internet Explorer 11, such as versions 11.0.10240.16384 and 11.1098.17763.0, to view and modify Events Dashboard settings, Internet Explorer does not display the saved settings.(Defect 155003)

Workaround: Use a different web browser that is supported.

6.10 Events Dashboard Appears Blank

Issue: If you click DASHBOARDS > EVENTS, the Events Dashboard is displayed. If you click on DASHBOARDS again, the Event Dashboard appears blank.(Defect 189391)

Workaround: Refresh the page to view the Events Dashboard.