[mapguide-users] Log4J Unauthenticated RCE CVE-2021-44228 Vulnerability

[Leonardo Bressan]

Thanks Jackie. 

Leonardo 



Da: "Gordon Luckett" <gordon.luckett at arrowgeomatics.com> 
A: "mapguide-users" <mapguide-users at lists.osgeo.org> 
Inviato: Mercoledì, 15 dicembre 2021 2:05:52 
Oggetto: Re: [mapguide-users] Log4J Unauthenticated RCE CVE-2021-44228 Vulnerability 

Thanks for sharing that Jackie. 

There are a lot of panicked ESRI users who aren't as lucky as MapGuide users over the Log4j issue. 


On Tue., Dec. 14, 2021, 7:59 p.m. Jackie Ng, < [ mailto:jumpinjackie at gmail.com | jumpinjackie at gmail.com ] > wrote: 



The Tomcat that is bundled with MapGuide does not use log4j (there are no log4j jar files installed). You would only be potentially affected if your MapGuide Java application itself brings in the log4j dependency. 

- Jackie 

You wrote: 

BQ_BEGIN

Has anyone done any studies if Mapguide is affected by this problem? 
Thanks in advance 

Leonardo 

[ https://www.abitat.it/ ] 	
Leonardo Bressan 
Settore tecnico 
[ mailto:leonardo.bressan at abitat.it | leonardo.bressan at abitat.it ] 
+39 348 2343422 | skype: leonardo.bressanabitat 
[ https://www.abitat.it/ | www.abitat.it ] 



Abitat SIT Srl 
Pojana Maggiore (VI), Via Roma 5 - 36026 | Ufficio: 0444 794127 | Fax: 0444 898220 
SIAMO CONTRARI ALLO SPAM. 
In ogni momento l’interessato, destinatario del messaggio, può consultare la nostra informativa policy privacy contenuta in questo [ http://www.abitat.it/privacy-policy | link ] 
Questo messaggio e ogni eventuale allegato sono confidenziali e destinati all'uso esclusivo del destinatario. 


-- 
Please Note: I no longer create new posts or post replies to any OSGeo mailing list through nabble. As a result, you most likely won't see this message appear on nabble's view of any OSGeo mailing list and may only see this message through mailing list archives or depending on your mailing list subscription settings, through daily message digests or automated notifications from the mailing lists. 
_______________________________________________ 
mapguide-users mailing list 
[ mailto:mapguide-users at lists.osgeo.org | mapguide-users at lists.osgeo.org ] 
[ https://lists.osgeo.org/mailman/listinfo/mapguide-users | https://lists.osgeo.org/mailman/listinfo/mapguide-users ] 

BQ_END


_______________________________________________ 
mapguide-users mailing list 
mapguide-users at lists.osgeo.org 
https://lists.osgeo.org/mailman/listinfo/mapguide-users 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/mapguide-users/attachments/20211215/6647ae95/attachment.html>