DSA-2021-287: Dell EMC SRS Policy Manager Security Update for Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228, CVE-2021-45046, and CVE-2021-45105)
概要: Dell EMC SRS Policy Manager remediation is available for the Apache Log4j Remote Code Execution Vulnerability that may be exploited by malicious users to compromise the affected system. Dell recommends implementing this remediation as soon as possible in light of the critical severity of the vulnerability. ...
この記事は次に適用されます：
この記事は次には適用されません：
この記事は、特定の製品に関連付けられていません。
すべての製品パージョンがこの記事に記載されているわけではありません。
影響
Critical
詳細
| Third-party Component | CVEs | More information |
| Apache Log4j | CVE-2021-44228 | Apache Log4j Remote Code Execution |
| CVE-2021-45046 | ||
| CVE-2021-45105 |
| Third-party Component | CVEs | More information |
| Apache Log4j | CVE-2021-44228 | Apache Log4j Remote Code Execution |
| CVE-2021-45046 | ||
| CVE-2021-45105 |
影響を受ける製品と修復
| Product | Affected Version | Updated Versions | Link to Update |
| SRS Policy Manager | 7.0 | 7.1 | https://www.dell.com/support/home/en-us/product-support/product/emc-secure-remote-services/drivers |
Note: Versions 6.6 and 6.8 are not impacted.
| Product | Affected Version | Updated Versions | Link to Update |
| SRS Policy Manager | 7.0 | 7.1 | https://www.dell.com/support/home/en-us/product-support/product/emc-secure-remote-services/drivers |
Note: Versions 6.6 and 6.8 are not impacted.
回避策と緩和策
See KB article 194537: SRS Policy Manager 7.0 - remediation for Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228, CVE-2021-45046 and CVE-2021-45105) (Acess to this article requires log in to Dell Support.)
変更履歴
| Revision | Date | Description |
| 1.0 | 2021-12-15 | Initial Release |
| 1.1 | 2021-12-21 | Version Updated |
| 1.2 | 2022-02-02 | Added link to workaround at the request of Champion and Customer Support |
関連情報
法的免責事項
対象製品
EMC Secure Remote Services, Secure Remote Services, Secure Remote Services Virtual Edition, Product Security Information文書のプロパティ
文書番号: 000194544
文書の種類: Dell Security Advisory
最終更新: 02 2月 2022
質問に対する他のDellユーザーからの回答を見つける
サポート サービス
お使いのデバイスがサポート サービスの対象かどうかを確認してください。