log4j in ArcGIS License Manager?

Question

Hello,

Does anyone know whether the ArcGIS License Manager is affected by the log4j2 exploit? I don't see it mentioned in any of the official communications.

thanks!

AaronVaughn1 · Answer

For anyone new to this, I have the technical article link where the python 3 script files can be downloaded with instructions: https://support.esri.com/en/Technical-Article/000026951

Totally new to anything sys admin within Enterprise, so not really savvy as to what some of these components do (JndiLookup.class ...) -- trying to learn as much as I can though.

MikeVolz · Answer

ESRI provided remediation python 3 scripts.  One script identifies vulnerable files (list), so you could always run that script on your LM server.

ChrisBarnett · Answer

thanks, yes. I did look through that article.