Kiwi R3 2021 - Log4j vulnerability verification and correction

Description

The 'formatMsgNoLookups' property was added in version 2.10.0, per the JIRA Issue LOG4J2-2109 that proposed it. Therefore the 'formatMsgNoLookups=true' mitigation strategy is available in version 2.10.0 and higher, but is no longer necessary with version 2.15.0, because it then becomes the default behavior .

Environment

None

Potential Workaround

None

CSP Request Details

None

CSP Rejection Details

None

Checklist

hide

TestRail: Results

Activity

Show:

Adam Dickmeiss December 14, 2021 at 7:18 PM

Approved and all but stuck in Jenkins pipeline at this time.

Done

Details

Assignee

Reporter

Labels

Priority

Sprint

Development Team

Mjolnir

Fix versions

Release

R3 2021 Bug Fix

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs

Created December 14, 2021 at 12:04 PM
Updated September 21, 2022 at 12:20 PM
Resolved December 14, 2021 at 7:25 PM
TestRail: Cases
TestRail: Runs