Question
Mphasis
Mphasis
IN
Mphasis
Posted: Dec 17, 2021
Last activity: Dec 17, 2021
Last activity: 17 Dec 2021 14:46 EST
Closed
Is Hot fix released for log4j2 vulnerability for PEGA 7.4 version
We are using PEGA 7.4 version and recently log4j2 vulnerability CVE 2021-44228 was idenitified.
So is there any Hot fix released for log4j2 vulnerability for PEGA 7.4 version ?
Posted: 2 years ago
MOD
Pegasystems Inc.
US
Hi @krishnas6880,
You can check out this post Pega Security Advisory - Apache Log4j Zero Day Vulnerability Hotfixes for information on hotfixes.
Posted: 2 years ago
Mphasis
Mphasis
IN
@MarissaRogersThanks for reply , I can see Hot fix is released for PEGA 8.x versions but we are using PEGA 7.4 so when can we expect hotfix for 7.4 version.
Posted: 2 years ago
MOD
Pegasystems Inc.
US
I checked on that for you and as of now we do not have any hotfixes for versions prior to 8. Please make sure to regularly check our documentation Security Advisory: Apache Log4j Zero Day Vulnerability and to follow the mitigation steps provided.