Log4J 2 CVE-2021-44228 Vulnerability

Products

• Information Centric Analytics

Issue/Introduction

Is Information Centric Analytics (ICA) susceptible to the Log4j 2 vulnerability identified in CVE-2021-44228?

Environment

Release : 6.x

Component : Microsoft Internet Information Services (IIS)

Resolution

ICA has been confirmed to not be susceptible to the Log4j 2 vulnerability defined in CVE-2021-44228.

Please refer to the following security advisory for a comprehensive list of Symantec products and their susceptibility to CVE-2021-44228: Symantec Security Advisory for Log4j 2 CVE-2021-44228 Vulnerability

Additional Information

Links to security advisories for other Broadcom products can be found here: Broadcom Response to Log4j Vulnerability