What API is used to fetch/pull data from salesforce using salesforce probe v2.01?

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

Is the salesforce probe using Salesforce - SOAP or the REST API?

We have done all the steps, and we are still unable to pull data from Salesforce.

Our network security scanner (Tenable) detected log4j vulnerabilities in salesforce_impl.jar.

Environment

• Release : 20.4
• Component : UIM - SALESFORCE

Resolution

Please download and deploy salesforce probe v2.0 for the log4j vulnerabilities fixes.

The probe supports Salesforce API v55.

Fixed Defects:
The security vulnerabilities are fixed by upgrading the following third-party components to a newer version:

• Apache Commons BeanUtils from 1.8.0 to 1.9.4
• Apache Commons Collections from 3.2.1 to 3.2.2
• Apache Commons from IO 2.4 to 2.11
• Bouncy Castle from 1.45 to 1.71
• commons-codec from 1.9 to 1.15
• google-gson from 2.3.1 to 2.9.1
• Guava: Google Core Libraries for Java from 18.0 to 31.1
• jsoup from 1.7.2 to 1.15.3
• zip4j from 1.3.2 to 2.11.2

Regarding your question, "The salesforce probe, is it using Salesforce - SOAP or the REST API?"

The probe uses direct HTTP calls (GET & POST) to communicate with the salesforce environment.

Additional Information

For more information please refer to the salesforce release notes:

Salesforce monitoring release notes