Wiki

Scale Your Enterprise

User Tools

Site Tools


kb:kb_item_364

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
kb:kb_item_364 [2021/12/16 11:43]
mneuendorff
kb:kb_item_364 [2021/12/17 08:51] (current)
mneuendorff
Line 11: Line 11:
 At this time, SAP continues to investigate the remote code execution vulnerability (CVE-2021-44228) related to Apache Log4j disclosed on Dec 10, 2021. SAP encourages our customers to update to the latest version of Log4j, where applicable. Currently, SAP does not have a workaround for SAP Business One. SAP Business One is currently in a Patch Pending status with SAP. Most of the SAP Business One Apache/Java applications are internal only. These include System Landscape Directory, Job Server, Service Layer, etc. Since they are internal only, this appears to reduce the vulnerability risk.  At this time, SAP continues to investigate the remote code execution vulnerability (CVE-2021-44228) related to Apache Log4j disclosed on Dec 10, 2021. SAP encourages our customers to update to the latest version of Log4j, where applicable. Currently, SAP does not have a workaround for SAP Business One. SAP Business One is currently in a Patch Pending status with SAP. Most of the SAP Business One Apache/Java applications are internal only. These include System Landscape Directory, Job Server, Service Layer, etc. Since they are internal only, this appears to reduce the vulnerability risk. 
  
-{{ :kb:3131789_-_mitigate_log4j_cve-2021-44228_vulnerability_in_sap_business_one.pdf |Download Mitigation Document}} +{{ :kb:b1update.png?400 |}} 
 + 
 +** 
 +{{ :kb:3131789_-_mitigate_log4j_cve-2021-44228_vulnerability_in_sap_business_one.pdf |Download Mitigation Document}}** 
kb/kb_item_364.1639672988.txt.gz · Last modified: 2021/12/16 11:43 by mneuendorff