Universal Discovery & CMDB User Discussions

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Revisit ServiceNow mitigation for Log4J

Paul Meaders over 1 year ago

I need to revisit this topic. A recent security scan in our environment found the following library:
C:\UCMDB\DataFlowProbe\runtime\probeGateway\discoveryResources\Service-Now\log4j-1.2.15.jar

In the Adapter Management tool, looking at the ServiceNow_Integration resources I see log4j-1.2.15.jar listed.

Does anyone have the remediation steps for this?

Thanks
Paul

0 Mark_Butler over 1 year ago

Hello Paul,

It appears that you may have 2021.11 or later version of UCMDB/CMS.

Here is the Security Bulletin for the log4j vulnerability.

CVE-2021-44228 & CVE-2021-45046 log4j vulnerability for Micro Focus classic CMS
https://portal.microfocus.com/s/article/KM000003085?language=en_US

It references another knowledge article for the resolution:
https://microfocus.my.salesforce.com/sfc/p/1t000000vhDP/a/8e000000cGIR/0WZQyrL3GwNcmU1lIxf0.I27wn89NQZ2CvvP7a9VooQ

If these instructions do not help, then you will need to open a support case.

Regards,

Mark
Cancel
Vote Up 0 Vote Down

Cancel
Suggested Answer

0 Paul Meaders over 1 year ago in reply to Mark_Butler

Thanks very much. That resolved my issue
Cancel
Vote Up 0 Vote Down

Cancel

Menu

Universal Discovery & CMDB User Discussions

Verified Answers

Revisit ServiceNow mitigation for Log4J

Suggested Answer

Resources