log4j // CVE-2021-44228 Wyse Management Suite

Viewing 7 posts - 1 through 7 (of 7 total)
  • Author
    Posts
  • December 12, 2021 at 1:14 pm #106630
    jayfromthebay
    Participant
    • Total Post: 7
    • Newbie
    • ★

    Hi all,

    does anyone know, if WMS is affected by CVE-2021-44228 aka log4j?
    It does seem to me that log4j is indeed a component of WMS. But I’m not too sure about it.

    Any help appreciated!

    Cheers

    J

    December 13, 2021 at 6:11 pm #106645
    ConfGen
    Keymaster
    • Total Post: 10696
    • Jedi Master
    • ★★★★★★★

    Yes, it is. However, Dell has already released a fix.

    CG

    December 14, 2021 at 3:20 am #106648
    S.Huber
    Participant
    • Total Post: 11
    • Regular Joe
    • ★★

    Hello,
    how to fix onprem WMS solutions?
    I can’t find any knowledgebase article on DELL page. 🙁

    Best regards

    Stefan

    December 14, 2021 at 3:33 am #106649
    S.Huber
    Participant
    • Total Post: 11
    • Regular Joe
    • ★★

    Update: i know its fixed with WMS 3.5.1

    December 14, 2021 at 6:01 am #106653
    jayfromthebay
    Participant
    • Total Post: 7
    • Newbie
    • ★

    Thanks guys.

    Now trying to upgrade to 3.5.1 – but it fails, saying certificate could not be generated (we’re using a public wildcard cert).

    Any ideas?

    December 17, 2021 at 4:11 am #106704
    DoDrew
    Participant
    • Total Post: 3
    • Newbie
    • ★

    Hello jayfromthebay,

    Make sure to install ver. 3.5 first, then install 3.5.1.

    Download 3.5

    December 17, 2021 at 12:29 pm #106708
    Jim Lathan
    Keymaster
    • Total Post: 314
    • Jacked into The Matrix
    • ★★★★★★

    Best practice it to perform upgrades incrementally, there are a few that you must have done prior to jumping to 3.5.1.

  • Author
    Posts
Viewing 7 posts - 1 through 7 (of 7 total)
  • You must be logged in to reply to this topic.