返回
-
标题
JAVA Log4J Vulnerability Alert Mitigation For EA AGILE -
说明
On Friday 10 December 2021 a new critical vulnerability was reported in the Apache Log4J library.(https://nvd.nist.gov/vuln/detail/CVE-2021-44228)For further information on this please visit:https://support.quest.com/essentials/log4j-vulnerability-update -
原因
This is 3rd party industry wide alert on all Java Log4 application users. On erwin EA Agile, one of the NoSQL command line (on our end) has possible exposure to this vulnerability alert.
-
解决办法
We have already applied a hot fix to remedy this with release 140.0 on erwin SaaS EA Agile/DM NoSQL environments.
No action is required from users.