Zero Day vulnerability in Java Log4j

[svisveswaraiya]

Hi,

"Zero Day vulnerability in Java Log4j " will it give any impact in ThingWorx, is there any mitigation plan?

Thanks in advance,

Shalini V.

[SachinSharma]

@svisveswaraiya 

You can refer this alert posted on eSupport portal.

Regards,

Sachin Sharma

[MikeFR]

Hello,

Thingworx isn't on that list... is there additional advice?

Cordially,

Mike

[SachinSharma]

@MikeFR 

That is the only alert you need to follow. Under the listed products there is a note, I have mentioned it here for your reference.

For products not listed above, we will provide recommended actions as they become available.  Please refer back to this alert for future updates.

Regards,

Sachin Sharma

[RosJir]

Hello, 

we are running Thingworx9 in docker container and it looks like that one part of Thingworx is using affected libraries.

Regards,

Rostislav Jirásek

[SachinSharma · Accepted solution]

@RosJir @svisveswaraiya @MikeFR 

The alert has been updated, refer this article for the log4j vulnerability fix in Thingworx Platform.

Regards,

Sachin Sharma