Skip to main content
00632610
December 15, 2021
Solved

AEM forms log4j vulnerable

We use AEM forms and we use only the rights management modules.

We would like to understand if we are vulnerable to the recent Log4j vulnerabilities, specifically CVE-2021-44228. If so, how do we mitigate?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Mayank_Tiwari
Mayank_TiwariAccepted solution
Adobe Employee
December 15, 2021

The impact of vulnerability CVE-2021-44228 reported in log4j2 versions 2.0-beta9 through 2.12.1 and 2.13.0 through 2.14.1 was analysed for AEM Forms and it was found to be impacted as it bundles different versions of log4j2 in different released versions.

The details of the analysis and impacted distributions together with mitigation steps to be performed are outlined at [1]. In case of any issues/questions/clarifications, you may contact us.

 


[1]: https://helpx.adobe.com/experience-manager/kb/aem-forms-vulnerability-cve-2021-44228.html?wcmmode=disabled


Thanks,
Mayank

 

View in thread

1 reply

Mayank_Tiwari
Adobe Employee
Mayank_TiwariAdobe EmployeeAccepted solution
Adobe Employee
December 15, 2021

The impact of vulnerability CVE-2021-44228 reported in log4j2 versions 2.0-beta9 through 2.12.1 and 2.13.0 through 2.14.1 was analysed for AEM Forms and it was found to be impacted as it bundles different versions of log4j2 in different released versions.

The details of the analysis and impacted distributions together with mitigation steps to be performed are outlined at [1]. In case of any issues/questions/clarifications, you may contact us.

 


[1]: https://helpx.adobe.com/experience-manager/kb/aem-forms-vulnerability-cve-2021-44228.html?wcmmode=disabled


Thanks,
Mayank

 

Translate
    Terms & ConditionsAccessibility statement

    Loading footer...