DSA-2021-287: Dell EMC SRS Policy Manager Security Update for Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228, CVE-2021-45046, and CVE-2021-45105)

Samenvatting: Dell EMC SRS Policy Manager remediation is available for the Apache Log4j Remote Code Execution Vulnerability that may be exploited by malicious users to compromise the affected system. Dell recommends implementing this remediation as soon as possible in light of the critical severity of the vulnerability. ...

Dit artikel is van toepassing op Dit artikel is niet van toepassing op Dit artikel is niet gebonden aan een specifiek product. Niet alle productversies worden in dit artikel vermeld.
Bekijk andere hulpbronnen

Impact

Critical

Gegevens

Third-party Component CVEs More information
Apache Log4j CVE-2021-44228 Apache Log4j Remote Code Execution
CVE-2021-45046
CVE-2021-45105
Third-party Component CVEs More information
Apache Log4j CVE-2021-44228 Apache Log4j Remote Code Execution
CVE-2021-45046
CVE-2021-45105
Dell Technologies raadt aan dat alle klanten rekening houden met zowel de basisscore van CVSS als alle relevante tijdelijke en omgevingsscores die gevolgen kunnen hebben voor de mogelijke ernst van de specifieke beveiligingsproblemen.

Getroffen producten en herstel

Product Affected Version Updated Versions Link to Update
SRS Policy Manager 7.0 7.1 https://www.dell.com/support/home/en-us/product-support/product/emc-secure-remote-services/drivers

Note: Versions 6.6 and 6.8 are not impacted.
Product Affected Version Updated Versions Link to Update
SRS Policy Manager 7.0 7.1 https://www.dell.com/support/home/en-us/product-support/product/emc-secure-remote-services/drivers

Note: Versions 6.6 and 6.8 are not impacted.

Tijdelijke oplossingen en risicobeperking

See KB article 194537: SRS Policy Manager 7.0 - remediation for Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228, CVE-2021-45046 and CVE-2021-45105) (Acess to this article requires log in to Dell Support.)

Revisiegeschiedenis

RevisionDateDescription
1.02021-12-15Initial Release
1.12021-12-21Version Updated
1.22022-02-02Added link to workaround at the request of Champion and Customer Support

Verwante informatie

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Juridische verklaring van afstand

Getroffen producten

EMC Secure Remote Services, Secure Remote Services, Secure Remote Services Virtual Edition, Product Security Information
Artikeleigenschappen
Artikelnummer: 000194544
Artikeltype: Dell Security Advisory
Laatst aangepast: 02 feb. 2022
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.