KB484082: Two versions of jar files exist in the refine server folder for MicroStrategy Intelligence Server 2019 Update 5 on Linux

Description 

On Linux, when you upgrade from Strategy Intelligence Server 2019 to Strategy Intelligence Server 2019 Update 5, along with all upgrades of Strategy 2020 updates, or provision a Strategy 2019 Update for AWS environment, the two versions of the following

.jar

files exist in the folder located in 

Strategy Home Path)/IntelligenceServer/openrefine/webapp/WEB-INF/lib

: 

Why is this happening? 

This is occurring due to the upgrading process of Strategy 2019 updates, where the old

.jar

file is kept, while the new .

jar

version is added. This behavior results in both versions of the

.jar

files being kept after the upgrade. 
This does not impact the functionality of the refine server. However, if the refine server uses the old .

jar 

files, it may lead to some security vulnerabilities. The following are some potential security issues:

• CVE-2012-0881
• CVE-2013-4002
• Missing 'httpOnly' cookie attribute in the refine server

Solution

You should manually remove the older versions of the following .

jar 

files from the folder:

• Butterfly-1.0.1.jar

• xerceslmpl-2.11.jar