Log4J unsupported version detected

Products

• CA Application Performance Management (APM / Wily / Introscope)

Issue/Introduction

We have scanned the hosting systems with Tenable and this finding was detected within one of the third party jars.

Plugin: 156032
Plugin Name: Apache Log4j Unsupported Version Detection Misc.

Severity: Critical

Plugin Output:
Path : /opt/CA/APM/EM/APMSqlServer/repo/com.ca.apm.server.teiid-10.7.0.252.war
Installed version : 1.2.17
First Discovered: Dec 26, 2021 13:41:28 EST
Last Observed: Jan 9, 2022 15:01:25 EST

 

Environment

Release : 10.7.0

Component : Introscope

Resolution

Log4j 1.2.17 is end of support but not vulnerable with the latest log4Shell issues. We plan to remove APM SQL Server from 10.8 in the near future.