Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

More about the issue: https://github.com/advisories/GHSA-jfh8-c2jp-5v3q

Table of Contents

Apache Log4j2 version <2.15.0 is a part of the following products

...

. Action to perform.

CATIA Magic portfolio

  • Magic Collaboration Studio (release 2021x Refresh1, 2021x Refresh2)
  • Magic Software Architect (release 2021x Refresh1, 2021x Refresh2)
  • Magic Cyber Systems Engineer (release 2021x Refresh1, 2021x Refresh2)
  • Magic Systems of Systems Architect (release 2021x Refresh1, 2021x Refresh2)

...

  • Teamwork Cloud (release 2021x Refresh1, 2021x Refresh2)
  • Cameo Collaborator for Teamwork Cloud (release  2021x Refresh1, 2021x Refresh2)
  • MagicDraw (release 2021x Refresh1, 2021x Refresh2)
  • Cameo Systems Modeler (release 2021x Refresh1, 2021x Refresh2)
  • Cameo Enterprise Architecture (release 2021x Refresh1, 2021x Refresh2)

To Do:  You have action to perform. See Remediation

Apache Log4j2 version <2.15.0 is a part of the following products, however it is not used for logging

...

. No action to perform.

CATIA Magic portfolio

  • Magic Collaboration Studio (release 2021x, 19.0 SP2, 19.0 SP3, 19.0 SP4)

...

See the detailed procedure to mitigate the risk concerning the CVE-2021-44228 vulnerability. 

 

The following products and versions are NOT affected

...

. No action to perform.

CATIA Magic portfolio

  • Magic Software Architect (release 2021x, 19.0 SP2, 19.0 SP3, 19.0 SP4)
  • Magic Cyber Systems Engineer (release 2021x, 19.0 SP2, 19.0 SP3, 19.0 SP4)
  • Magic Systems of Systems Architect (release 2021x, 19.0 SP2, 19.0 SP3, 19.0 SP4)

...