Obsolete MongoDB in HP SmartTracker Software

[cheesyham27]

We found that version 3.7.15 of HP SmartTracker uses an obsolete version of MongoDB. Unfortunately, updating to the latest version of the software, 4.3.20, did not resolve the issue. Does HP have a remedy for this security vulnerability?

[VikramTheGreat]

Hi @cheesyham27,

Welcome to the HP Support Community.
 

Thank you for bringing this to our attention and for providing the HP SmartTracker versions and operating system details. I understand your concern regarding the obsolete MongoDB version and that updating from HP SmartTracker 3.7.15 to version 4.3.20 did not resolve the security concern.
 

Since this involves a potential security vulnerability in HP SmartTracker running in a Windows Server 2019 environment, it requires advanced investigation beyond the troubleshooting that can be completed through the HP Support Community.
 

I recommend contacting our HP Phone Support team for further assistance. The support team can review the SmartTracker installation, configuration, and security findings in more detail and, where available, provide remote assistance to help investigate the issue.
 

When contacting HP Support, have the following information available:

• HP SmartTracker version previously installed: 3.7.15
• Current HP SmartTracker version: 4.3.20
• Operating system: Microsoft Windows Server 2019
• The MongoDB version identified by the security scan
• The specific vulnerability or CVE number, if available
• Any security scanner logs or reports related to the finding

This information will help our support team better understand the issue and investigate the available resolution.
 

Since this is security-related and requires a detailed review of the software environment, our HP Phone Support team will be best placed to assist you further and help investigate the issue.

Take care and have an amazing day!