Exposure to the log4j vulnerability.

Products

• NetMaster Network Management for TCP/IP

Issue/Introduction

Are we exposed to the log4j vulnerability within the Netmaster product?

Environment

Release : 12.2

Component : NetMaster Network Management for TCP/IP

Resolution

There have been TWO ptfs created for Netmaster 12.2 regarding log4j. 

Note - 3270 Netmaster is not impacted... and neither is Webcenter/MTC-NM

 

LU03957 has been published for the Web Portal.
LU03956 has been published for the NetMaster API.

 

Prior PTFs LU03873 and LU03370 have been PE'd.

 

https://support.broadcom.com/security-advisory/content/security-advisories/Broadcom-Mainframe-Software-Security-Advisory-for-Log4j-2-CVE-2021-44228-Vulnerability/MFDSA19790

 

Security Advisory 

You can see the complete Security advisory for the API Service here

You can see the complete Security Advisory for the Web Portal here.