Direct links to fixes
APAR status
Closed as program error.
Error description
One or more case management components use Apache Log4j 2.x library, depending on the product and release. The following case management components use Apache Log4j 2.x library in relation to the product and release. IBM Case Manager v5.3.x - Case Emitter IBM Business Automation Workflow v18.x - v21.0.2 - Case Emitter IBM Business Automation Workflow v21.0.3 - Case Forms - Case Emitter (already contain the latest 2.x release) In all product and releases, the Apache Log4j 2.x library used is not affected or vulnerable to the following CVE-2021-44832 CVE-2021-45105 CVE-2021-45046 CVE-2021-44228 PRODUCTS AFFECTED IBM Business Automation Workflow IBM Case Manager
Local fix
Problem summary
No additional information is available.
Problem conclusion
A fix is available or will be available that ensures that Apache Log4j 2.x library is updated to v2.17.1 or later.
Temporary fix
Comments
APAR Information
APAR number
JR64464
Reported component name
BUS AUTO WORKFL
Reported component ID
5737H4100
Reported release
J00
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2022-01-11
Closed date
2022-02-09
Last modified date
2022-02-09
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
BUS AUTO WORKFL
Fixed component ID
5737H4100
Applicable component levels
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS8JB4","label":"IBM Business Automation Workflow"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"19.0.0.1","Line of Business":{"code":"LOB45","label":"Automation"}}]
Document Information
Modified date:
24 August 2022