can we upgrade log4j in j2ee application | Adobe Higher Education
Skip to main content
Dieses Thema wurde für Antworten geschlossen.
Beste Antwort von sspencer123

You can also quickly update the 2 log4j-core files and remove the class and restart if you have a patch schedule that takes longer to implement

zip -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class

2 Antworten

Asutosh_Jena_
Community Advisor
Asutosh_Jena_Community Advisor
Community Advisor
January 13, 2022

Hi @swaroop1958233 

 

You should be able to mitigate it by following the below article:

https://helpx.adobe.com/experience-manager/kb/aem-forms-vulnerability-cve-2021-44228.html?wcmmode=disabled

https://logging.apache.org/log4j/2.x/security.html

 

Thanks!

    S
    Adobe Employee
    sspencer123Adobe EmployeeAntwort
    Adobe Employee
    January 13, 2022

    You can also quickly update the 2 log4j-core files and remove the class and restart if you have a patch schedule that takes longer to implement

    zip -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class

      Allgemeine NutzungsbedingungenAccessibility statement

      Loading footer...