bheinemann asked a question.
Log4j Exploit
Is version 11.13.1.1 we are currently using affected by the current problems with Log4J?
0/255
Upload Attachment
File Upload
Maximum file
size allowed is 3 MB.
Supported file types:
Documents (.txt, .doc, .docx, .pdf), Images (.jpg, .png), Comma Separated Files
(.csv) Speadsheets (.xlsx, .xls)
Are you sure you want to cancel the case creation?
Case closed successfully
Case id: 00001065
Activity: Status change: 2 hours ago
Last comment
Action performed successfully
File Upload
Maximum file size allowed is 3 MB.
Supported file types:
Documents (.txt, .doc, .docx, .pdf), Images (.jpg, .png), Comma Separated Files
(.csv) Speadsheets (.xlsx, .xls)
Are you sure you want to close this case
| Products | Region | Phone Numbers |
|---|---|---|
| FlexNet Operations FlexNet Embedded FlexNet Publisher FlexNet Connect FlexNet Code Insight InstallAnywhere InstallShield |
North America * |
+1 630-332-2513 (toll) +1 877-279-2853 (toll-free in North America) |
| Europe * |
+44 1925 944367 (toll) +44 800 047 8642 (toll-free in Europe) |
|
| Japan * | +81 3-4540-5335 (select option 2) | |
| Australia * |
+61 3 9895 2177 +61 1800 560 603 (toll-free in Australia) |
|
|
Usage Intelligence (formerly
Revulytics) Compliance Intelligence |
Please use the Case Portal to submit your support ticket or reach out to your Revenera contact. | |
File Upload
Maximum file
size allowed is 3 MB.
Supported file types:
Documents (.txt, .doc, .docx, .pdf), Images (.jpg, .png), Comma Separated Files
(.csv) Speadsheets (.xlsx, .xls)
FNP Log4j is used in one of our example codes and is not used as part of any functionality. If the you uses that example then you are vulnerable. You can upgrade the component yourself.
Path : C:\Program Files\FlexNet Publisher 64-bit License Server Manager\examples\alerter\lib\log4j-1.2.8.jar
FNP customer latest update
---------------
Here you can find our official document for the same https://community.revenera.com/s/Revenera-Company-News/Security-Advisory-Log4j-Java-Vulnerability-CVE-2021-44228216905
as for as FNP 11.18.3 will disable now from PLC and the new version will be uploaded shortly after the fix with the following:
Log4j version has been upgraded to 2.15 in the example section and submitted.
Re-packaged kits will be uploaded to PLC with the new version 11.18.3.1. This will be available in the PLC shortly.
--------
For the old version of FNP, you can follow the above workaround or use the latest version of FNP which will have the fix included.Hi @bheinemann ,
After updated with latest log4j you should see the following files under C:\Program Files\FlexNet Publisher 64-bit License Server Manager\examples\alerter\lib\<find the below image for the files>
or log4j-2.26.0.jar also can be replaced.
Best Regards,