Forum Discussion

Umesh_Parab's avatar
Umesh_Parab
3 years ago

LogicMonitor collectors running vulnerable version of Log4j are affected by "Log4shell" CVE-2021-44228 vulnerability?

LogicMonitor collectors running vulnerable version of Log4j are affected by "Log4shell" CVE-2021-44228 vulnerability? If no, can you please explain how?  
Mosh's avatar
Mosh
Icon for Professor rankProfessor
3 years ago
14 hours ago, Manish Arora said:

Pls find the recent update:

 

At this time the Log4Shell mitigation has already been released to the LM platform and each Collector will have automatically updated its configuration file to incorporate the fix on Saturday, Dec 11th. Because each Collector restarts itself on a daily cadence, the updated configuration will automatically take effect on all Collectors no later than Sunday, Dec 12th.


No updates to the Collector software are required to enable the Log4Shell mitigation and no manual intervention is required.

Hope this helps!!!

 

Hi Manish,

Where was that posted?