This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision | |||
|
kb:kb_item_364 [2021/12/16 11:43] mneuendorff |
kb:kb_item_364 [2021/12/17 08:51] (current) mneuendorff |
||
|---|---|---|---|
| Line 11: | Line 11: | ||
| At this time, SAP continues to investigate the remote code execution vulnerability (CVE-2021-44228) related to Apache Log4j disclosed on Dec 10, 2021. SAP encourages our customers to update to the latest version of Log4j, where applicable. Currently, SAP does not have a workaround for SAP Business One. SAP Business One is currently in a Patch Pending status with SAP. Most of the SAP Business One Apache/Java applications are internal only. These include System Landscape Directory, Job Server, Service Layer, etc. Since they are internal only, this appears to reduce the vulnerability risk. | At this time, SAP continues to investigate the remote code execution vulnerability (CVE-2021-44228) related to Apache Log4j disclosed on Dec 10, 2021. SAP encourages our customers to update to the latest version of Log4j, where applicable. Currently, SAP does not have a workaround for SAP Business One. SAP Business One is currently in a Patch Pending status with SAP. Most of the SAP Business One Apache/Java applications are internal only. These include System Landscape Directory, Job Server, Service Layer, etc. Since they are internal only, this appears to reduce the vulnerability risk. | ||
| - | {{ : | + | {{ : |
| + | |||
| + | ** | ||
| + | {{ : | ||