DSA-2021-287: Dell EMC SRS Policy Manager Security Update for Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228, CVE-2021-45046, and CVE-2021-45105)
Riepilogo: Dell EMC SRS Policy Manager remediation is available for the Apache Log4j Remote Code Execution Vulnerability that may be exploited by malicious users to compromise the affected system. Dell recommends implementing this remediation as soon as possible in light of the critical severity of the vulnerability. ...
Questo articolo si applica a
Questo articolo non si applica a
Questo articolo non è legato a un prodotto specifico.
Non tutte le versioni del prodotto sono identificate in questo articolo.
Impatto
Critical
Dettagli
| Third-party Component | CVEs | More information |
| Apache Log4j | CVE-2021-44228 | Apache Log4j Remote Code Execution |
| CVE-2021-45046 | ||
| CVE-2021-45105 |
| Third-party Component | CVEs | More information |
| Apache Log4j | CVE-2021-44228 | Apache Log4j Remote Code Execution |
| CVE-2021-45046 | ||
| CVE-2021-45105 |
Prodotti interessati e correzione
| Product | Affected Version | Updated Versions | Link to Update |
| SRS Policy Manager | 7.0 | 7.1 | https://www.dell.com/support/home/en-us/product-support/product/emc-secure-remote-services/drivers |
Note: Versions 6.6 and 6.8 are not impacted.
| Product | Affected Version | Updated Versions | Link to Update |
| SRS Policy Manager | 7.0 | 7.1 | https://www.dell.com/support/home/en-us/product-support/product/emc-secure-remote-services/drivers |
Note: Versions 6.6 and 6.8 are not impacted.
Soluzioni alternative e mitigazioni
See KB article 194537: SRS Policy Manager 7.0 - remediation for Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228, CVE-2021-45046 and CVE-2021-45105) (Acess to this article requires log in to Dell Support.)
Cronologia delle revisioni
| Revision | Date | Description |
| 1.0 | 2021-12-15 | Initial Release |
| 1.1 | 2021-12-21 | Version Updated |
| 1.2 | 2022-02-02 | Added link to workaround at the request of Champion and Customer Support |
Informazioni correlate
Dichiarazione di non responsabilità
Prodotti interessati
EMC Secure Remote Services, Secure Remote Services, Secure Remote Services Virtual Edition, Product Security InformationProprietà dell'articolo
Numero articolo: 000194544
Tipo di articolo: Dell Security Advisory
Ultima modifica: 02 feb 2022
Trova risposta alle tue domande dagli altri utenti Dell
Support Services
Verifica che il dispositivo sia coperto dai Servizi di supporto.