Zurück
-
Titel
JAVA Log4J Vulnerability Alert Mitigation For EA AGILE -
Beschreibung
On Friday 10 December 2021 a new critical vulnerability was reported in the Apache Log4J library.(https://nvd.nist.gov/vuln/detail/CVE-2021-44228)For further information on this please visit:https://support.quest.com/essentials/log4j-vulnerability-update -
Ursache
This is 3rd party industry wide alert on all Java Log4 application users. On erwin EA Agile, one of the NoSQL command line (on our end) has possible exposure to this vulnerability alert.
-
Lösung
We have already applied a hot fix to remedy this with release 140.0 on erwin SaaS EA Agile/DM NoSQL environments.
No action is required from users.