com.wily.log4j.jar Vulnerability

Products

• CA Application Performance Management (APM / Wily / Introscope)

Issue/Introduction

We have found that there is a log4j file in version 20.9:

lib/com.wily.log4j.jar

Does this file have any vulnerabilities?

Environment

Release : 20.9

Component : Agent

Resolution

The 20.x Agents (and also other versions as well) are not affected by the log4j vulnerability.  Please see our communication on the logj4 vulnerability below.

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/security-advisories/Security-Advisory-CVE-2019-17571-log4j-1.2-vulnerability-and-Broadcom-CA-APM/19839