Dell EMC OpenManage Plug-in for Nagios Core False Positive Security Vulnerability

概要: This article provides a list of security vulnerabilities that cannot be exploited on Dell EMC OpenManage Plug-in for Nagios Core version 3.1 and earlier, but which may be identified by security scanners. ...

この記事は次に適用されます: この記事は次には適用されません: この記事は、特定の製品に関連付けられていません。 すべての製品パージョンがこの記事に記載されているわけではありません。

セキュリティ文書の種類

Security KB

CVE識別子

The CVE IDs are listed in the table below.

問題の概要

See the 'Recommendation' section below for details on each CVE.

推奨事項

The vulnerabilities that are listed in the below table are in order by the date on which Dell EMC OpenManage Plug-in for Nagios Core Engineering determined that the Dell EMC OpenManage Plug-in for Nagios Core version 3.1 and earlier are not vulnerable.
 
Third-party  Component CVE IDs Summary of Vulnerability Reason why Product is not Vulnerable Date Determined False Positive
Apache Log4j 1.2.17-cloudera1 CVE-2021-4104  Requires use of JMSAppender, a nonstandard configuration Does not use JMSAppender configuration December 20, 2021
Apache Log4j 1.2.17-cloudera1 CVE-2019-17571  Requires use of SocketServer, a nonstandard configuration Does not use SocketServer configuration December 20, 2021
Apache Log4j 1.2.17-cloudera1 CVE-2022-23302 Requires use of JMSAppender, a nonstandard configuration Does not use JMSAppender configuration March 11, 2022
Apache Log4j 1.2.17-cloudera1 CVE-2022-23305 Requires use of JDBCAppender, a nonstandard configuration Does not use JDBCAppender configuration March 11, 2022
Apache Log4j 1.2.17-cloudera1 CVE-2022-23307 Requires use of Chainsaw, a nonstandard configuration Does not use Chainsaw configuration March 11, 2022

対象製品

Dell OpenManage Plug-in for Nagios Core, Dell OpenManage Plug-in for Nagios Core version 2.0, Dell OpenManage Plug-in for Nagios Core version 1.0, Dell EMC OpenManage Plug-in for Nagios Core - Current Version , Dell OpenManage Plug-in for Nagios Core version 2.1, Dell EMC OpenManage Plug-in v3.0 for Nagios Core, Product Security Information ...
文書のプロパティ
文書番号: 000195050
文書の種類: Security KB
最終更新: 01 4月 2022
バージョン:  2
質問に対する他のDellユーザーからの回答を見つける
サポート サービス
お使いのデバイスがサポート サービスの対象かどうかを確認してください。