Skip to main content
This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
joerghoh
joerghohAccepted solution
Adobe Employee
Jan 5, 2022 2:26 PM UTC

Please report this to the support, that this page should be amended with these 2 additional CVEs.

View in thread

3 replies

Raja-Karuppsamy
Community Advisor
Raja-KaruppsamyCommunity Advisor
Community Advisor
Jan 5, 2022 7:34 AM UTC

@brentd5354857 

Navigate to OSGi bundles console - look for log4j bundle version -> All versions from all from 2.0-beta9 to 2.14.1 are impacted.

Please refer this article for AEM log4j vulnerability (CVE-2021-44228) :
https://www.albinsblog.com/2021/12/apache-log4j2-remote-code-execution-through-JNDI-endpoints.html

 

 

Translate
    brentd5354857Author
    Jan 5, 2022 12:19 PM UTC

    First off thats a 3RD PARTY!  Second off it doesn't even list the 4th CVE-2021-44228.

     

    We pay Adobe money for this product, THEY need to list details about ALL 4 CVE's for log4j.

    Translate
    joerghoh
    Adobe Employee
    joerghohAdobe EmployeeAccepted solution
    Adobe Employee
    Jan 5, 2022 2:26 PM UTC

    Please report this to the support, that this page should be amended with these 2 additional CVEs.

    Translate
      Terms & ConditionsAccessibility statement

      Loading footer...