Versions Compared

Old Version 1

changes.mady.by.user Developer

Saved on

compared with

New Version 2

changes.mady.by.user Developer

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

log4J_procedure.pdf

More about the issue https://github.com/advisories/GHSA-jfh8-c2jp-5v3q

...

  • if found: log4j-core-2.11.2.jar
  • then remove log4j-core-2.11.2.jar
  • copy log4j-core-2.15.0.jar over to log4j-core-2.11.2.jar
  • repeat for any other log4j 2.x file found.

Detailed procedure to mitigate the risk concerning the CVE-2021-44228 vulnerability. log4J_procedure.pdf

Option 2

If you cannot upgrade log4j, you may add 

...