CloudLink: Apache Log4J vulnerability CVE-2021-44228
Résumé: This article provides a list of security vulnerabilities that cannot be exploited on CloudLink, all versions, but which may be flagged by security scanners.
Cet article concerne
Cet article ne concerne pas
Cet article n’est associé à aucun produit spécifique.
Toutes les versions du produit ne sont pas identifiées dans cet article.
Type d’article de sécurité
Security KB
Identifiant CVE
CVE-2021-44228
Résumé des problèmes
This article provides a list of security vulnerabilities that cannot be exploited on CloudLink, all versions, but which may be flagged by security scanners.
Détails
The vulnerabilities listed in the table below are in order by the date on which CloudLink Engineering determined that CloudLink, all versions, was not vulnerable.
| Third Party Component | CVE ID | Summary of Vulnerability | Reason why Product is not Vulnerable | Date Determined False Positive |
| Apache Log4j
|
CVE-2021-44228
|
It is remotely exploitable without authentication, for example, may be exploited over a network without the need for a username and password.
|
CloudLink uses log4j-1.2.17. Log4j 1.x does not have JNDI lookup feature. Log4j 1.x JMSAppender code using JNDI API, but this appender is not configured in CloudLink.
|
December 13, 2021 |
Recommandations
None
Mention légale
Produits concernés
CloudLink SecureVM, CloudLinkProduits
Product Security InformationPropriétés de l’article
Numéro d’article: 000194928
Type d’article: Security KB
Dernière modification: 12 mai 2026
Version: 2
Trouvez des réponses à vos questions auprès d’autres utilisateurs Dell
Services de support
Vérifiez si votre appareil est couvert par les services de support.