algernonce
commented
2 years ago - Vendor Name: ESRI
- Product Name: ArcGIS Enterprise, ArcGIS Server, Portal for ArcGIS, ArcGIS Data Store, ArcGIS GeoEvent Server, ArcGIS Workflow Manager Server
- Version(s) affected: All?
- Status: Fixed
- Update Available: Yes, requires script remediation
- Notes: ESRI has created scripts to remove the JndiLookup class, but has not issued patches to upgrade the Log4j versions
- References: https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-software-and-cve-2021-44228-aka-log4shell-aka-logjam/
- Last Updated: 2021-12-17
justindmurphy
justmurphy