ArcSight Announcements

Home

State Suggested Answer
Replies replies
50
Answers answer
1
Subscribers subscribers
43
Views views
15913
Users 0 members are here
+2 person also asked this people also asked this
Locked Locked

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

CVE-2021-44228 - What products are vulnerable

Nir_Adelstein over 2 years ago

Which ArcSight products are vulnerable to the CVE?
What is the Patch Release Program or Mitigation for the topic?

Tags:

ESM

cve

smart connector

Top Replies

Parents

0 Naz Mal over 2 years ago

Is Arcmc affected by this cve? According to the link https://fossa.com/blog/log4j-log4shell-zero-day-vulnerability-impact-fixes/amp/

It mentions to upgrade log4j version to 2.15. I checked 8.2 connector and can see it uses version 2.13.

I have added the property as mentioned in the link above to the agent.wrapper.conf. Not sure if it is right location.. Any ideas.

Dlog4j2.formatMsgNoLookups=true
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Naz Mal over 2 years ago

Is Arcmc affected by this cve? According to the link https://fossa.com/blog/log4j-log4shell-zero-day-vulnerability-impact-fixes/amp/

It mentions to upgrade log4j version to 2.15. I checked 8.2 connector and can see it uses version 2.13.

I have added the property as mentioned in the link above to the agent.wrapper.conf. Not sure if it is right location.. Any ideas.

Dlog4j2.formatMsgNoLookups=true
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data

Resources

Learning Services

Partner Programs

Privacy

Compliance

Help

Company

Privacy Policy
Terms of Use
Cookies Preferences

Accessibility
Anti-Slavery Statement

Support
Contact Us

Careers
Code of Business Conduct and Ethics

The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.