Skip to main content
Participant
January 12, 2022
Question

ColdFusion Log4j version 1.2.x remove/update plan

  • January 12, 2022
  • 0 replies
  • 178 views

The findings of this log4j-1.2.15 and log4j1.2.17 jar files become critical findings now in our scan. The workaround of rename these files do not work because the scan actually looks for the version number inside the manifest file. We hope that there'll be a better solution for this unsupported version.

    This topic has been closed for replies.