Posted By
Martin Rupp
12-16-2021 03:45
Found In
Egroup:
Pentaho
\
view thread
Matt - my colleagues have created the scanner. Log4j 1.x had reached end of life! It is a very old lib with many security issues. (e.g.: https://www.cvedetails.com/cve/CVE-2019-17571/) Acc. to the German BSI report log4j 1.x must also be replaced by log4j 2.16 (not simple to do it, because ...
|