Jackdoor

updated

5 years ago

J

Jackdoor

1 Rookie

3 Posts

7

8264

December 13th, 2021 01:00

Log4J Vulnerability: Affected software?

I was wondering which. if  any Dell software is affected by the Log4j Vulnerability CVE-2021-44228? I did find an article which linked to a list of the software. However I cannot get to the list as it simply says, "This article is permission based. Find another article.".

  • Jesse L (retired)

    10 Wizard

    17898 Posts

    69016 Points

    4680

    0

    Posted December 20th, 2021 05:00

    All, Information from our engineering team below/.

    “Dell is reviewing the recent vulnerability disclosure in the Apache Log4j library to assess both our corporate network and our offerings. The security of our products and network is a top priority and critical to protecting our customers. We will communicate any security updates or mitigations, if necessary, at https://www.dell.com/support/security as they become available.”

     

     

    Jesse L (retired)

  • jkupski

    6 Posts

    4851

    1

    Posted December 13th, 2021 12:00

    Amazed that there is no consolidated response to this issue yet.  Support states currently that iDRAC is unaffected but will not provide access to the text of the KB article with the statement "I understand the importance of the knowledge article, Our Senior engineer team is working diligently to find solutions, I would get back to you with the information as soon as possible."

    I cannot wrap my head around how access to the "hey, are my systems going to be pwned by anyone who cares to" KB article is a "senior engineering team" issue, but that's the current guidance.  

  • Johsm

    1 Message

    4782

    1

    Posted December 13th, 2021 15:00

    Same issue did login with my Workaccount but are unable to fetch a list/article for impacted product/tools like DSM and other!

  • 4690

    1

    Posted December 13th, 2021 23:00

    same

  • varus99

    1 Message

    4611

    0

    Posted December 14th, 2021 01:00

    Same

  • b4sty

    2 Posts

    4602

    0

    Posted December 14th, 2021 01:00

    same

  • vys_james

    1 Message

    4319

    1

    Posted December 14th, 2021 07:00

    Also experiencing this issue.

  • CeCe19

    4 Posts

    4279

    2

    Posted December 14th, 2021 09:00

    I just got off a long support call with Dell. I was concerned about iDRAC and Open Manage - we don't use other Dell products.  My tech support guy was informed by engineering that iDRAC is not affected.  Open Manage Server is not affected.  Open Manage Enterprise is affected, and a patch is expected to come out no sooner than Dec 17.  The reason why my business account can't access the KB is unknown. He recommended contacting our Account Manager, although unfortunately he's out of office for a week.  

  • BEPCWaco

    2 Posts

    4191

    0

    Posted December 14th, 2021 12:00

    Same problem here. Spent an hour trying different ways to get to the KB article. Very frustrating. However, I was able to login using my boss' account and pull up the article. I have a Premier account with a whole bunch of computers and network devices registered. Yet I don't have the permission to view something that should have been public informaiton. How stupid is that!

  • CyberneticOrganism

    1 Rookie

    11 Posts

    1727

    0

    Posted December 14th, 2021 12:00

    Then COPY & PASTE the article here; or at the very least: summarize it!