Kiwi R3 2021 - Log4j vulnerability verification and correction

Description

The 'formatMsgNoLookups' property was added in version 2.10.0, per the JIRA Issue LOG4J2-2109 that proposed it. Therefore the 'formatMsgNoLookups=true' mitigation strategy is available in version 2.10.0 and higher, but is no longer necessary with version 2.15.0, because it then becomes the default behavior .

CSP Request Details

None

CSP Rejection Details

None

Environment

None

Potential Workaround

None

Checklist

hide

TestRail: Results

Activity

Show:

Ann-Marie Breaux December 28, 2021 at 4:00 PM

Per no separate Lotus Jira required, since the Lotus RMB update takes care of the log4j issue for Lotus

Oleksii Petrenko December 21, 2021 at 9:29 AM

Deployed to Kiwi BF. Closing

Kateryna Senchenko December 14, 2021 at 12:20 PM

Done

Details

Assignee

Reporter

Priority

Story Points

Sprint

Development Team

Folijet

Fix versions

Release

R3 2021 Bug Fix

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs

Created December 14, 2021 at 12:04 PM
Updated December 28, 2021 at 4:00 PM
Resolved December 15, 2021 at 11:38 AM
TestRail: Cases
TestRail: Runs

Flag notifications