Security scanners flag log4j-core-2.8.2.jar in OCI Data Warehouse version 7.3.14
- Views:
- 206
- Visibility:
- Public
- Votes:
- 0
- Category:
- oncommand-insight-data-warehouse
- Specialty:
- oci
- Last Updated:
Applies to
OnCommand Insight Data Warehouse (DWH) 7.3.14
Issue
After upgrading DWH to 7.3.14, the DB2 install directory contains the following at-risk jar file:
F:\Program Files\IBM\DB2\SQLLIB\federation\jdbc\lib\log4j-core-2.8.2.jar