The findings of this log4j-1.2.15 and log4j1.2.17 jar files become critical findings now in our scan. The workaround of rename these files do not work because the scan actually looks for the version number inside the manifest file. We hope that there'll be a better solution for this unsupported version.
AdChoices