DSA-2021-287: Dell EMC SRS Policy Manager Security Update for Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228, CVE-2021-45046, and CVE-2021-45105)
Resumo: Dell EMC SRS Policy Manager remediation is available for the Apache Log4j Remote Code Execution Vulnerability that may be exploited by malicious users to compromise the affected system. Dell recommends implementing this remediation as soon as possible in light of the critical severity of the vulnerability. ...
Este artigo aplica-se a
Este artigo não se aplica a
Este artigo não está vinculado a nenhum produto específico.
Nem todas as versões do produto estão identificadas neste artigo.
Impacto
Critical
Dados
| Third-party Component | CVEs | More information |
| Apache Log4j | CVE-2021-44228 | Apache Log4j Remote Code Execution |
| CVE-2021-45046 | ||
| CVE-2021-45105 |
| Third-party Component | CVEs | More information |
| Apache Log4j | CVE-2021-44228 | Apache Log4j Remote Code Execution |
| CVE-2021-45046 | ||
| CVE-2021-45105 |
Produtos afetados e soluções
| Product | Affected Version | Updated Versions | Link to Update |
| SRS Policy Manager | 7.0 | 7.1 | https://www.dell.com/support/home/en-us/product-support/product/emc-secure-remote-services/drivers |
Note: Versions 6.6 and 6.8 are not impacted.
| Product | Affected Version | Updated Versions | Link to Update |
| SRS Policy Manager | 7.0 | 7.1 | https://www.dell.com/support/home/en-us/product-support/product/emc-secure-remote-services/drivers |
Note: Versions 6.6 and 6.8 are not impacted.
Soluções temporárias e atenuações
See KB article 194537: SRS Policy Manager 7.0 - remediation for Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228, CVE-2021-45046 and CVE-2021-45105) (Acess to this article requires log in to Dell Support.)
Histórico de revisão
| Revision | Date | Description |
| 1.0 | 2021-12-15 | Initial Release |
| 1.1 | 2021-12-21 | Version Updated |
| 1.2 | 2022-02-02 | Added link to workaround at the request of Champion and Customer Support |
Informações relacionadas
Aviso de isenção legal
Produtos afetados
EMC Secure Remote Services, Secure Remote Services, Secure Remote Services Virtual Edition, Product Security InformationPropriedades do artigo
Número do artigo: 000194544
Tipo de artigo: Dell Security Advisory
Último modificado: 02 fev. 2022
Encontre as respostas de outros usuários da Dell para suas perguntas.
Serviços de suporte
Verifique se o dispositivo está coberto pelos serviços de suporte.