Skip to main content
Participant
Jan 12, 2022 7:10 PM UTC
Question

ColdFusion Log4j version 1.2.x remove/update plan

The findings of this log4j-1.2.15 and log4j1.2.17 jar files become critical findings now in our scan. The workaround of rename these files do not work because the scan actually looks for the version number inside the manifest file. We hope that there'll be a better solution for this unsupported version.

    This topic is closed to new replies. Start a new post to keep the conversation going.