CVE-2021-44228 vulnerability with erwin Data Modeler Installs
. erwin Data Modeler Metaintegration Bridge.
https://nvd.nist.gov/vuln/detail/CVE-2021-44228
https://nvd.nist.gov/vuln/detail/CVE-2021-45046
Further information on this please click: https://support.quest.com/essentials/log4j-vulnerability-update
Although there is no direct exposure to erwin Data Modeler (DM) with respect to the recent security vulnerabilities, we do have precautious mitigation for the below erwin Data Modeler releases.
As our 3rd party tool "Meta Integration" hereby certifies that all its software are NOT affected by design because of its usage the Apache Log4j third party software as explained below:
-MIMB uses Log4J only as bundled within Axis2 as delivered in java\axis2\log4j*
see Meta Integration® Model Bridge (MIMB) - LICENSES
However, any use of the Log4J within Axis2 is as always been disabled. Nonetheless Meta Integration upgraded all above use and bundle of Apache Log4j to the latest version 2.17.1 fixing CVE-2021-44228 + CVE-2021-45046 + CVE-2021-45105 +CVE-2021-44832
MITIGATION STEPS:
NB: To Run MIMB-OEM-DeleteOld.bat file using command prompt, requires Administrator privileges
Please download "MIMB-OEM-CumulativePatch-1010-20220105.zip" from below location to a local machine.
MIMB-OEM-CumulativePatch-1010-20220105.zip
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Feedback Conditions d’utilisation Confidentialité Cookie Preference Center