Voltar
-
Título
JAVA Log4J Vulnerability Alert Mitigation For EA AGILE -
Descrição
On Friday 10 December 2021 a new critical vulnerability was reported in the Apache Log4J library.(https://nvd.nist.gov/vuln/detail/CVE-2021-44228)For further information on this please visit:https://support.quest.com/essentials/log4j-vulnerability-update -
Causa
This is 3rd party industry wide alert on all Java Log4 application users. On erwin EA Agile, one of the NoSQL command line (on our end) has possible exposure to this vulnerability alert.
-
Resolução
We have already applied a hot fix to remedy this with release 140.0 on erwin SaaS EA Agile/DM NoSQL environments.
No action is required from users.