zero-day exploit affecting the popular Apache Log4j utility (CVE-2021-44228) for FrameMaker

[Johannes5C2C]

Does anyone know if the zero-day exploit affecting the popular Apache Log4j utility (CVE-2021-44228) that was announced on 12/9/2021 will affect Adobe FrameMaker, Version 16.0.3.979?

[Winfried Reng]

Hi,

I found some log4j files in the DITA OT.

I do not have more info, but I guess that this does not mean that FrameMaker is affected.

Best regards

Winfried

[Winfried Reng]

Adobe said:

log4j vulnerability analysis is performed for FrameMaker. FrameMaker is safe against CVE-2021-44228

Therefore everything OK. But good to ask!

[Johannes5C2C]

Hi, thanks for your efforts!