topic Re: Apache Log4j Core Vulnerability in Qlik Replicate

Apache Log4j Core Vulnerability

A-G — Tue, 08 Nov 2022 21:35:24 GMT

Do you have a patch to address the latest Apache Log4j Core Vulnerability similar to the upgrade to log4j 2.17 in 2021

We see a new Vulnerability that has been identified against Replicate host

New version (patched) 2.19 See https://logging.apache.org/log4j/2.x/download.html

thanks

Re: Apache Log4j Core Vulnerability

Alan_Wang — Tue, 08 Nov 2022 22:26:27 GMT

Hi @A-G

Please create a support case along with the associated CVE information if you would like us to review it. Currently, the latest version of Replicate uses log4j 2.17.1

Re: Apache Log4j Core Vulnerability

Dana_Baldwin — Tue, 08 Nov 2022 22:39:47 GMT

Hi @A-G

The link you provided is to the download page for log4j. Can you please provide the CVE number for this new vulnerability?

Thank you!

Dana