Related Tips & Info

Knowledge Doc: Vulnerability "CVE-2021-4104 EOL/Obsolete Software: Apache Log4j 1.X Detected" detected in Digital Lab

Heather Caldwell
 
0 Likes

For "EOL/Obsolete Software Apache Log4j 1.X Detected" vulnerability in Digital Lab 24.2.

Environment

UFT Digital Lab any versions.
Linux OS.


Situation

Vulnerability is scanned from the folder of Digital Lab on Linux OS - CVE-2021-4104 - Apache Log4j 1.2 Remote Code Execution Vulnerability

EOL/Obsolete Software: Apache Log4j 1.X Detected from path in Linux OS: 

  • /opt/UFTMobile/server/jetty/webapps/hp4m-connector/WEB-INF/lib/log4j-1.2.17.jar
  •  /opt/UFTMobile/server/jetty/webapps/instrumentation/WEB-INF/lib/log4j-1.2.17.jar
  • /opt/UFTMobile/server/jetty/webapps/security/WEB-INF/lib/log4j-1.2.17.jar

Read full article

Labels:

Support Tips/Knowledge Docs
Comment List
Related
Recommended

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.