[mapguide-users] Log4J Unauthenticated RCE CVE-2021-44228 Vulnerability

[Gordon Luckett]

Thanks for sharing that Jackie.

There are a lot of panicked ESRI users who aren't as lucky as MapGuide
users over the Log4j issue.


On Tue., Dec. 14, 2021, 7:59 p.m. Jackie Ng, <jumpinjackie at gmail.com> wrote:

> The Tomcat that is bundled with MapGuide does not use log4j (there are no
> log4j jar files installed). You would only be potentially affected if your
> MapGuide Java application itself brings in the log4j dependency.
>
> - Jackie
>
> You wrote:
>
> Has anyone done any studies if Mapguide is affected by this problem?
> Thanks in advance
>
> Leonardo
>
> <https://www.abitat.it/>
> *Leonardo Bressan*
> Settore tecnico
> leonardo.bressan at abitat.it
> +39 348 2343422 | skype: leonardo.bressanabitat
> www.abitat.it
>
> *Abitat SIT Srl*
> Pojana Maggiore (VI), Via Roma 5 - 36026 | Ufficio: 0444 794127 | Fax:
> 0444 898220
>
> SIAMO CONTRARI ALLO SPAM.
> In ogni momento l’interessato, destinatario del messaggio, può consultare
> la nostra informativa policy privacy contenuta in questo link
> <http://www.abitat.it/privacy-policy>
> Questo messaggio e ogni eventuale allegato sono confidenziali e destinati
> all'uso esclusivo del destinatario.
>
>
> --
> *Please Note: I no longer create new posts or post replies to any OSGeo
> mailing list through nabble. As a result, you most likely won't see this
> message appear on nabble's view of any OSGeo mailing list and may only see
> this message through mailing list archives or depending on your mailing
> list subscription settings, through daily message digests or automated
> notifications from the mailing lists.*
> _______________________________________________
> mapguide-users mailing list
> mapguide-users at lists.osgeo.org
> https://lists.osgeo.org/mailman/listinfo/mapguide-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/mapguide-users/attachments/20211214/cb762828/attachment.html>