I’m looking for information on whether your organization is aware of the OpenSSL 3.0 vulnerabilities disclosed earlier this month, summarized in CVE-2022-3602 and CVE-2022-3786. If so, have you investigated whether any of your internal systems are vulnerable and have you mitigated those vulnerabilities if they exist?
Thank you!