Security Bulletin: Vulnerability in Apache Log4j (CVE-2021-4104) affects InfoSphere Data Replication

December 17, 2021

Share this post:

There is a vulnerability in the version of Log4j that was included in InfoSphere Data Replication.

CVE(s): CVE-2021-4104

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
InfoSphere Data Replication	11.4.0
InfoSphere Data Replication	11.4

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www.ibm.com/support/pages/node/6527834
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/215048

See information about: IBM Security Bulletins, IBM Security Vulnerability Management (PSIRT), Reporting a Security Issue, IBM Secure Engineering

Access IBM Product Support to: Subscribe to Notifications, Download Fixes & PTFs (Fix Central), Access the Directory of IBM Worldwide Contacts

An issue was identifed in OpenSSL when MQ is using it to parse certificates. ...read more

IBM MobileFirst Platform Foundation has addressed the following vulnerability by updating the version of OpenSSL ...read more

IBM HTTP Server is used by IBM Netezza Performance Portal. IBM Netezza Performance Portal has addressed the applicable CVEs. ...read more