As communicated on Tuesday December 14, Foglight Evolve and Foglight for Databases 6.0.0 are affected with the vulnerability associated with the Apache log4j utility.
As a reminder, here is a knowledge base article which describes the issue and the known workaround.
How does this affect me?
If you have deployed Foglight 6.0.0 with any of these cartridges, a fix is now available:
Please note that any Foglight release prior to version 6.0.0 is not affected.
The second vulnerability, CVE-2021-45046, was announced on December 14. Our fix addresses both vulnerabilities. To resolve these vulnerabilities, download here for Foglight Evolve and here for Foglight for Databases.
Please review the following knowledge base article for further details.
If you need assistance after attempting the items above, contact Quest Technical Support
We hope this answers your questions about this issue. If you have any additional questions, please reach out to Tim Fritz, Foglight product manager, at firstname.lastname@example.org .We apologize for the inconvenience this issue may have caused and look forward to assisting you in the future.