SAP Knowledge Base Article - Preview

3805916 - Is SAP ASE impacted by Apache Log4j FilteredObjectInputStream Deserialization Bypass Vulnerability ?

Symptom

You would like to know whether SAP ASE is impacted by Apache Log4j FilteredObjectInputStream Deserialization Bypass Vulnerability.

./ASE-16_0/lib/log4j-api-2.17.1.jar

./ASE-16_0/lib/log4j-core-2.17.1.jar

./COCKPIT-4/common/lib/log4j-api-2.17.1.jar

./COCKPIT-4/common/lib/log4j-core-2.17.1.jar

./shared/lib/log4j-api-2.17.1.jar

./shared/lib/log4j-core-2.17.1.jar

./WLA/lib/log4j-api-2.23.1.jar

./WLA/lib/log4j-core-2.23.1.jar

./WS-16_0/lib/log4j-api-2.23.1.jar

./WS-16_0/lib/log4j-core-2.23.1.jar


Read more...

Environment

  • SAP Adaptive Server Enterprise (ASE) 16.x
  • SAP Adaptive Server Enterprise (ASE) 16.x for Business Suite

Product

SAP Adaptive Server Enterprise 16.0 ; SAP Adaptive Server Enterprise 16.1

Keywords

Apache Log4j FilteredObjectInputStream Deserialization Bypass vulnerability , KBA , BC-SYB-ASE , Sybase ASE Database Platform (non Business Suite) , BC-DB-SYB , Business Suite on Adaptive Server Enterprise , Bug Filed

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.