Operator Console, mcs_ws is showing a log4j vulnerability on CU5 and later
search cancel

Operator Console, mcs_ws is showing a log4j vulnerability on CU5 and later

book

Article ID: 424964

calendar_today

Updated On:

Products

DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

My security scan is showing that mcs_ws.war and the expanded files show the log4j to be an old version.

Environment

CU5 and later

Resolution

As of 23.4CU5, mcs_ws.war no longer is used and may be deleted. The new version is mcs_ui_app.war.
This was documented on the last line of this official techdoc.

Here is the entry: 
Additionally, the deprecated web application mcs_ws will be disabled permanently and is no longer supported.