Flashes (Alerts)
Abstract
I am using IBM Business Automation Content Analyzer on Cloud. What is the impact of CVE-2021-44228?
Content
CVE-2021-44228 describes a vulnerability in the Apache Log4j 2.X Java library dubbed Log4Shell.
IBM Business Automation Content Analyzer on Cloud does not include any version of log4j 2.x. Therefore, BACAoC is not vulnerable to the Log4Shell CVE.
IBM Business Automation Content Analyzer on Cloud does use Log4j version 1, however usage of this version of log4j is not vulnerable to the Log4Shell exploit.
For an IBM perspective on this vulnerability, please review the information from IBM at:
[{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSUM7G","label":"IBM Business Automation Content Analyzer on Cloud"},"ARM Category":[{"code":"a8m3p0000006xMcAAI","label":"Automation Content Analyzer"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
Modified date:
16 December 2021
UID
ibm16526318