RE: Security Bulletin: Multiple Vulnerabilities in Apache Log4j affect IBM Db2 Web Query for i

Jim.. What I'm referring to is exposing Web Query to the outside world. We never took it down internally. We DID block access to the outside world over a week ago.

So yes, I'm wondering how seriously to take the DoS vulnerability - Does that mean bad actors could disable web query? Or could this affect the entire (production) system?


-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Jim Oberholtzer
Sent: Wednesday, December 22, 2021 11:15 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: Security Bulletin: Multiple Vulnerabilities in Apache Log4j affect IBM Db2 Web Query for i

Is Web Query exposed to the outside world? If so I'd take it more
seriously. If it is only available internally behind the network wall,
then I'd wait until the fix comes out.

Managing risk is one of the intangible parts of our job regardless if the
boss is engaged or not.

--
Jim Oberholtzer
Chief Technical Architect
Agile Technology Architects