Re: Remote code execution exploit found in Log4j .....

[Jim Franz <franz9000@xxxxxxxxx>]

Using the link in Michael's post, IBM iAccess Family is listed as "not
impacted". But using a search tool on my corporate laptop,
C:\Program Files (x86)\IBM\Client
Access\eclipse\plugins\org.apache.ant_1.6.2\lib\ant-apache-log4j.jar

how do i resolve this?   I know this is a replaced product. Does the java
client have the same? How would i know what version is in the plugin if IBM
is only going to list it as "product not impacted".
I have to answer to the security group within the company.

btw - this was given to list the log4j jars on a Win machine.
run the following command inside of PowerShell to find the file(s):

 Get-ChildItem -Path C:\ "*log4j*" -Recurse -Force
-ErrorAction SilentlyContinue | Where {$_.extension -like ".jar"} |
select-object FullName



Jim Franz



On Wed, Dec 15, 2021 at 10:19 AM Mayer, Michael via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

> Latest PSIRT notification !
>
> https://www.ibm.com/blogs/psirt/an-update-on-the-apache-log4j-cve-2021-44228-vulnerability/#list-of-products
>
>
>
> Very Respectfully,
> Michael Mayer
> IBM i on Power System Admin.
> IT Operations.
> The Florida Bar
> 651 E. Jefferson St
> Tallahassee, Florida 32399-2300
> mmayer@xxxxxxxxxxxxxx
> https://www.floridabar.org
> Office: 850.561.5761
> Cell: 518.641.8906
>
>
> ________________________________
> Please note: Florida has very broad public records laws. Many written
> communications to or from The Florida Bar regarding Bar business may be
> considered public records, which must be made available to anyone upon
> request. Your e-mail communications may therefore be subject to public
> disclosure.
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: https://amazon.midrange.com