Effect of log4j vulnerability on wildfly-11.0.0-final
Question
I am using wildfly-11.0.0-final. I can see the log4j-jboss-logmanager jar has a log4j 1.2.16 dependency. Will it be affected? How to mitigate this?
1 answers
solution1
1 2021-12-15 12:09:06
If you are not using the JMSAppender you shouldn't be exposed if I understand https://www.wildfly.org/news/2021/12/13/Log4j-CVEs/ correctly.
The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.
Related Question
SonarQube log4j Vulnerability
How to search for log4j vulnerability?
Was slf4j affected with vulnerability issue in log4j
Jenkins log4j vulnerability testing from pipeline job
How do I fix the log4j vulnerability (Windows)?
log4j vulnerability with avro-tools-1.9.1.jar
Ubuntu and log4j vulnerability: java not even installed
Apache/2.4.29 (Ubuntu) apache2 Log4j vulnerability
Does log4j security violation vulnerability affect log4net?
Are there any ways to fix Log4j vulnerability when it is being used as a transitive dependency
Related Tags