DSA-2021-287: Dell EMC SRS Policy Manager Security Update for Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228, CVE-2021-45046, and CVE-2021-45105)

Sammendrag: Dell EMC SRS Policy Manager remediation is available for the Apache Log4j Remote Code Execution Vulnerability that may be exploited by malicious users to compromise the affected system. Dell recommends implementing this remediation as soon as possible in light of the critical severity of the vulnerability. ...

Denne artikkelen gjelder for Denne artikkelen gjelder ikke for Denne artikkelen er ikke knyttet til noe bestemt produkt. Det er ikke produktversjonene som identifiseres i denne artikkelen.
Ta en titt på andre ressurser

Påvirkning

Critical

Detaljer

Third-party Component CVEs More information
Apache Log4j CVE-2021-44228 Apache Log4j Remote Code Execution
CVE-2021-45046
CVE-2021-45105
Third-party Component CVEs More information
Apache Log4j CVE-2021-44228 Apache Log4j Remote Code Execution
CVE-2021-45046
CVE-2021-45105
Dell Technologies anbefaler at alle kunder tar hensyn til både grunnpoengsummen og alle relevante, midlertidige og miljømessige resultater som kan påvirke den potensielle alvorlighetsgraden knyttet til bestemte sikkerhetsproblemer.

Berørte produkter og utbedring

Product Affected Version Updated Versions Link to Update
SRS Policy Manager 7.0 7.1 https://www.dell.com/support/home/en-us/product-support/product/emc-secure-remote-services/drivers

Note: Versions 6.6 and 6.8 are not impacted.
Product Affected Version Updated Versions Link to Update
SRS Policy Manager 7.0 7.1 https://www.dell.com/support/home/en-us/product-support/product/emc-secure-remote-services/drivers

Note: Versions 6.6 and 6.8 are not impacted.

Endelige og midlertidige løsninger

See KB article 194537: SRS Policy Manager 7.0 - remediation for Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228, CVE-2021-45046 and CVE-2021-45105) (Acess to this article requires log in to Dell Support.)

Endringshistorikk

RevisionDateDescription
1.02021-12-15Initial Release
1.12021-12-21Version Updated
1.22022-02-02Added link to workaround at the request of Champion and Customer Support

Relatert informasjon

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Juridisk ansvarsfraskrivelse

Berørte produkter

EMC Secure Remote Services, Secure Remote Services, Secure Remote Services Virtual Edition, Product Security Information
Artikkelegenskaper
Artikkelnummer: 000194544
Artikkeltype: Dell Security Advisory
Sist endret: 02 feb. 2022
Få svar på spørsmålene dine fra andre Dell-brukere
Støttetjenester
Sjekk om enheten din er dekket av støttetjenestene.