Titan Software does not use OpenSSL

 Overview

Titan software does not use OpenSSL. Vulnerabilities specific to OpenSSL therefore do not apply to Titan’s own software components.

Affected software

This guidance applies to the Titan software family, including Titan DMZ and Titan SFTP. It addresses OpenSSL-specific Common Vulnerabilities and Exposures (CVEs), not every vulnerability that may affect a server hosting Titan.

Vulnerability status

Titan does not require or use OpenSSL. An OpenSSL security advisory, including one issued after a Titan build’s release date, does not by itself indicate that Titan is affected or needs an OpenSSL-related update.

If OpenSSL is installed on a server running Titan, investigate whether another application or the operating system installed or uses it. Titan’s status does not mean that a separate OpenSSL installation is unaffected. Assess and remediate that installation according to the guidance for the software that owns it.

Support and resources

If your security team needs assistance assessing an OpenSSL finding, submit a support ticket through the helpdesk and include:

• The CVE identifiers.
• The Titan product, version, and build.
• The host operating system.
• The report’s evidence, including any OpenSSL file paths and detected versions.

Do not remove or replace shared libraries until you have identified the software that depends on them.