log4j vulnerability in java CVE-2019-17571 - is APM affected?

Products

• DX Application Performance Management
• CA Application Performance Management (APM / Wily / Introscope)
• CA Application Performance Management Agent (APM / Wily / Introscope)
• DX APM SaaS

Issue/Introduction

Been asked to check out CVE - https://nvd.nist.gov/vuln/detail/CVE-2019-17571 this CVE is specific to v1.2 of log4j - is APM affected by this?

 

 

Environment

Release : All

Component : Introscope

Resolution

Broadcom APM is not affected by CVE-2019-17571.

Please review the official product security notification about this CVE;

https://support.broadcom.com/external/content/security-advisories/Security-Advisory-CVE-2019-17571-log4j-1.2-vulnerability-and-Broadcom-CA-APM/19839