Hi,
Understand that Tersus is using Log4j. With the recent security issue with Log4j was wondering if it's possible to upgrade the Log4j is Tersus so as to plug the issue.
In Tersus server 2.2.7, noticed log4j files in following folders.
C:\tersus\server_ver2.2.7\tomcat-atomikos\log4j-1.2.16.jarC:\tersus\server_ver2.2.7\tomcat-atomikos\log4j-src.txtC:\tersus\server_ver2.2.7\tomcat-atomikos\log4j-src.zipC:\tersus\server_ver2.2.7\WEB-INF\lib\log4j-1.2.16.jarC:\tersus\server_ver2.2.7\WEB-INF\lib\log4j-src.txt
According to link below, latest Log4j to plug security issue is version 2.17.0.
https://www.zdnet.com/article/apache-releases-new-2-17-0-patch-for-log4j-to-solve-denial-of-service-vulnerability/
If it's possible to upgrade the Log4j in Tersus server, hope you can advice on the steps.Thanks
CheersCliff
To use the full functionality of this web site, JavaScript needs to be turned on.
For best results, use the Firefox browser..
Copyright © 2003-2017 - Tersus Software Ltd., All rights reserved. Terms of Use License Graphic design by EmaraDesign