IBM Support

IT39949: APACHE LOG4J VULNERABILITY MAY AFFECT CONNECT:DIRECT FOR MICROSOFT WINDOWS (CVE-2021-44832)

Direct links to fixes

6.2.0.8-IBMConnectDirectforMicrosoftWindows-x64-fp0008-if017
6.2.0.8-IBMConnectDirectforMicrosoftWindows-x64-fp0008-if016
6.2.0.8-IBMConnectDirectforMicrosoftWindows-x64-fp0008-if011
6.2.0.8-IBMConnectDirectforMicrosoftWindows-x64-fp0008-if005
6.2.0.8-IBMConnectDirectforMicrosoftWindows-x64-fp0008
6.2.0.7-IBMConnectDirectforMicrosoftWindows-x64-fp0007
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if048
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if106
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if044
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if104
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if043
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if103
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if039
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if100
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if033
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if095
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if028
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if094
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if025
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if024
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if090
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if089
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if023
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if088
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if087
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if018
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if015
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if014
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if087
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if083
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if009
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if081
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if084
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if079
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if007
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if083
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if004
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if077
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if081
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006
6.2.0.5-IBMConnectDirectforMicrosoftWindows-x64-fp0005
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if046
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if073
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if045
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if069
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if064
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if040
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if069
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if038
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if037
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if063
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if068
4.8.0.3-SterlingConnectDirectforMicrosoftWindows-x86-fp0003-if057
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if028
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if057
4.8.0.3-SterlingConnectDirectforMicrosoftWindows-x86-fp0003-if053
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if061
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if056
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if022
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if052
4.8.0.3-SterlingConnectDirectforMicrosoftWindows-x86-fp0003-if050
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if013
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if050
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if056
4.8.0.3-SterlingConnectDirectforMicrosoftWindows-x86-fp0003-if049
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004
6.2.0.3-IBMConnectDirectforMicrosoftWindows-x64-fp0003
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if037
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if048
4.8.0.3-SterlingConnectDirectforMicrosoftWindows-x86-fp0003-if042

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Apache Log4j is used by IBM Sterling Connect:Direct for
Microsoft Windows as part of its logging infrastructure. There
are vulnerabilities in the Apache Log4j open source library
versions used by IBM Sterling Connect:Direct for Microsoft
Windows. Based on current information and analysis, IBM
Sterling Connect:Direct for Microsoft Windows is not impacted
by CVE-2021-44832. However, out of an abundance of caution, IBM
Sterling Connect:Direct for Microsoft Windows has upgraded
Log4j to 2.17.1.

Local fix

  • STRMFT-12864
VF / VF
Circumvention: None

Problem summary

  • Users Affected:
Sterling Connect:Direct for Windows 4.8.0.3 - 4.8.0.3_iFix041
Sterling Connect:Direct for Windows 6.0.0.3 - 6.0.0.4_iFix047
Sterling Connect:Direct for Windows 6.1.0.1 - 6.1.0.2_iFix035
Sterling Connect:Direct for Windows 6.2.0.0 - 6.2.0.2_iFix012

Problem Description:
Apache Log4j is used by IBM Sterling Connect:Direct for
Microsoft Windows as part of its logging infrastructure. There
are vulnerabilities in the Apache Log4j open source library
versions used by IBM Sterling Connect:Direct for Microsoft
Windows. Based on current information and analysis, IBM
Sterling Connect:Direct for Microsoft Windows is not impacted
by CVE-2021-44832. However, out of an abundance of caution, IBM
Sterling Connect:Direct for Microsoft Windows has upgraded
Log4j to 2.17.1.

Platforms Affected:
Windows

Problem conclusion

  • Resolution Summary:
Updated log4j to version 2.17.1 in Install Agent and Integrated
File Agent (Connect:Direct 6.2.0 only).

Delivered In:
Sterling Connect:Direct for Windows 4.8.0.3_iFix042
Sterling Connect:Direct for Windows 6.0.0.4_iFix048
Sterling Connect:Direct for Windows 6.1.0.2_iFix036
Sterling Connect:Direct for Windows 6.2.0.2_iFix013

Temporary fix

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    IT39949
    • 

  • Reported component name
    STR CD FOR WIND
    • 

  • Reported component ID
    5725C9908
    • 

  • Reported release
    620
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt / Xsystem
    • 

  • Submitted date
    2022-02-14
    • 

  • Closed date
    2022-02-15
    • 

  • Last modified date
    2022-02-15
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    STR CD FOR WIND
    • 

  • Fixed component ID
    5725C9908
    • 



Applicable component levels


    








      
              
                            

              

              [{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSRRVY","label":"Sterling Connect:Direct for Microsoft Windows"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"620","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]
              

                                                                    

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            18 March 2026
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback