'Log4J vulnerability
I have been asked to check our db for the log4j vulnerability. The information on the web is a little confusing but it is my understanding if you have Log4j.jar or log4j.bin you need to remediate these issues and it is not just Apache. So I did a search on my db and found:
/u01/app/oracle/product/19.0.0/dbhome_1/suptools/tfa/release/tfa_home/jlib/log4j-core-2.9.1.jar
/u01/app/oracle/product/19.0.0/dbhome_1/md/property_graph/lib/log4j-core-2.11.0.jar
So my question is are these vulnerabilities? What is the best way to fix these?
Thank you
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|