one of our departments is saying our servers we use for Commvault are using log4shell v1.2x. They need to update it to v2.16.0. Im green when it comes to this topic. is this log4shell a third party app which the server has installed prior to Commvault software, or is this something that Commvault installs, and is resolved by updating the Commvault software? Thats where the confusion comes into play for me, because it comes down to whether or not the department that brought this up is asking us for permissions to update it, or if this is something to do with commvault software which my team needs to handle?
Solved
log4shell a Commvault application, support updates?
Best answer by Mike Struening RETIRED
Hi
This is an open source library used for logging/debugging. If you have database agents that use archive (and a few more features, listed in the above article) then you might be vulnerable.
We currently have an update that removes 2.x and upgrades to 2.15, though we are working on updates to upgrade to 2.16.
The above post is where I’m updating everyone. Head over there and subscribe so you can get the latest updates.
Reply
Rich Text Editor, editor1
Editor toolbars
Press ALT 0 for help
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.