Support #13123

[SCP ID :##6371##] : eCustody-Upgrde log4j

Added by Zahir Abd Latif about 2 years ago. Updated almost 2 years ago.

Status:Closed - End of life cycleStart date:July 28, 2022
Priority:HighDue date:
Assignee:Zahir Abd Latif% Done:

100%

Category:-Spent time:-
Target version:-

Description

Hi,
Kindly attend below request:-

In the eCustody application there is a vulnerability in log4j that must be closed immediately.

Currently ecustody using ver 1.2.15 and the latest is currently ver 2.18.0.

Is in the current status of eCustody that log4j is upgraded to version 2.18.0?

Please respond soon?

We don't currently open eCostody to the public until the log4j issue is resolved.

Note:
  1. bii-custody-admin
  2. bii-custody-main
  3. Add 2 log4j2 jar files

History

#1 Updated by Najmi Pasarudin about 2 years ago

  • Status changed from New - Begin Life Cycle to Development / Work In Progress

#2 Updated by Najmi Pasarudin about 2 years ago

  • Description updated (diff)

#3 Updated by Najmi Pasarudin about 2 years ago

  • Description updated (diff)
  • % Done changed from 0 to 50

Finish clean up library. Next is to replace log4j with log4j2.

#4 Updated by Zahir Abd Latif almost 2 years ago

  • Status changed from Development / Work In Progress to Closed - End of life cycle
  • Assignee changed from Najmi Pasarudin to Zahir Abd Latif
  • % Done changed from 50 to 100

Issue closed in SCP.

Also available in: Atom PDF