3132322 - CVE-2021-44228 - Diagnostics Agent impact for Log4j vulnerability

• Vulnerability CVE-2021-44228 for log4j
• How does this impact the Diagnostics Agent for Solution Manager

log4j is an apache library used commonly in java applications.  This particular issue was identified in log4j2 and fixed in log4j2.15.0.

• Diagnostics Agent
• All operating systems

• The diagnostics agent is not affected by this vulnerability.
• Refer to SAP's official statement at https://support.sap.com/content/dam/support/en_us/library/ssp/my-support/trust-center/sap-tc-01-5025.pdf

https://logging.apache.org/log4j/2.x/security.html

https://nvd.nist.gov/vuln/detail/CVE-2021-44228

CVE-2021-44228, log4j, Diagnostics Agent, vulnerability, apache , KBA , SV-SMG-DIA-SRV-AGT , Agent Framework , Problem