vCenter Server 8.0 Security scans flag log4j-1.2.12rsa-1.jar

Products

• VMware vCenter Server

Issue/Introduction

This article provides instructions for the removal of the deprecated file

Security scanners flag the below file on vCenter Server 8.0:

/usr/lib/vmware/common-jars/log4j-core-2.17.0.jar

Resolution

Implement the following steps to remove the deprecated log4j-core-2.17.0.jar file.

1. Take a snapshot of the vCenter Server and/or a back up
2. SSH to vCenter via root
3. Identify which log4j-core files are present:

ls /usr/lib/vmware/common-jars/log4j-core*

4. On vCenter Server 8.0, the vCenter Server should have the following two files:

/usr/lib/vmware/common-jars/log4j-core-2.17.0.jar
/usr/lib/vmware/common-jars/log4j-core-2.17.1.jar

5. If both files exist, proceed to removing the deprecated version:

rm /usr/lib/vmware/common-jars/log4j-core-2.17.0.jar

6. Reboot the vCenter Server
7. Perform a security scan

Additional Information

Impact/Risks:
A reboot of the vCenter Server is required.