ArcGIS Enterprise Log4j Vulnerability (CVE-2021-44228) Patch or Mitigation?

[Carl_Flint]

Good afternoon, is there any patches in the works or potential mitigation steps for the latest java log4j vulnerability (CVE-2021-44228)?  I know that GeoEvent server uses log4j and can assume some other enterprise server's or portal potentially do as well.  Any help would be appreciated in resolving this zero-day.

Thanks,

[Scott_Tansley]

Hey

the instructions with the script tel you to run it on the install folder AND the content folder.  Other ArcGIS components it’s just the install folders.  I’ve done it on multiple clients implementations.  No issues.  It does what it says on the tin.  🙂

[Ikebana]

Aha! I totally missed that :p. thanks!

[Scott_Tansley]

Truth be told, so did I the first time.  My pleasure.  🙂