NEW CVE for Log4j version 1.x https://nvd.nist.gov/vuln/detail/CVE-2021-4104 looks like now log4j-1.2.x.jar is also affected Checked arcmc and is showing these jar file versions. Is there a patch for arcmc?

ArcSight Announcements

Home

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

CVE-2021-4104

Naz Mal over 2 years ago

NEW CVE for Log4j version 1.x https://nvd.nist.gov/vuln/detail/CVE-2021-4104

looks like now log4j-1.2.x.jar is also affected

Checked arcmc and is showing these jar file versions.

Is there a patch for arcmc?

Tags:

ArcMC 2.94

0 Kyle Pearson over 2 years ago

Just because there wasn't an answer on this as it was most likely drowned by the much larger thread the official guidance is at: https://community.microfocus.com/cyberres/b/sws-22/posts/summary-of-cyberres-impact-from-log4j-or-logshell-logjam-cve-2021-44228?utm_source=blog&utm_medium=referral&utm_campaign=7014J000000dXXYQA2
Cancel
Vote Up 0 Vote Down

Cancel

Resources

Support

Documentation

Learning Services

Partner Programs

Privacy

Compliance

Help

Company

Accessibility
Anti-Slavery Statement

Support
Contact Us

Careers
Code of Business Conduct and Ethics

The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.

Menu

ArcSight Announcements

CVE-2021-4104

Tags:

Resources