topic log4j in ArcGIS License Manager? in ArcMap Questions

log4j in ArcGIS License Manager?

ChrisBarnett — Wed, 15 Dec 2021 21:44:50 GMT

Hello,

Does anyone know whether the ArcGIS License Manager is affected by the log4j2 exploit? I don't see it mentioned in any of the official communications.

thanks!

Re: log4j in ArcGIS License Manager?

AaronVaughn1 — Wed, 15 Dec 2021 22:11:03 GMT

Yeah, I don't either, but I'm assuming you were including this latest blog article:

https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-software-and-cve-2021-44228-aka-log4shell-aka-logjam/

Nothing about license manager though.

Re: log4j in ArcGIS License Manager?

ChrisBarnett — Wed, 15 Dec 2021 22:29:08 GMT

thanks, yes. I did look through that article.

Re: log4j in ArcGIS License Manager?

MichaelVolz — Thu, 16 Dec 2021 00:33:07 GMT

ESRI provided remediation python 3 scripts. One script identifies vulnerable files (list), so you could always run that script on your LM server.

Re: log4j in ArcGIS License Manager?

AaronVaughn1 — Thu, 16 Dec 2021 15:58:28 GMT

For anyone new to this, I have the technical article link where the python 3 script files can be downloaded with instructions: https://support.esri.com/en/Technical-Article/000026951

Totally new to anything sys admin within Enterprise, so not really savvy as to what some of these components do (JndiLookup.class ...) -- trying to learn as much as I can though.