![]() ![]() The values specified by _XY will vary, for example _60 vs _67:Ĭ:\IBM\SpectrumProtect\webserver\usr\servers\veProfile\workarea\\90\data\cacheAdapt\.app.manager_67\WEB-INF\libħ. Please remove these folders in the workarea location. For the workarea folder locations, for example:Ĭ:\IBM\SpectrumProtect\webserver\usr\servers\veProfile\workarea\\90\data\cacheAdapt\.app.manager_60\WEB-INF\libĬ:\IBM\SpectrumProtect\webserver\usr\servers\veProfile\workarea\\90\data\cacheAdapt\.app.manager_68\WEB-INF\libĬ:\IBM\SpectrumProtect\webserver\usr\servers\veProfile\workarea\\90\data\cacheOverlay\.app.manager_67\WEB-INF\lib\.cacheĬ:\IBM\SpectrumProtect\webserver\usr\servers\veProfile\workarea\\90\data\cacheOverlay\.app.manager_68\WEB-INF\lib\.cacheįolders with the log4j jar names will be created, for example:Ĭ:\IBM\SpectrumProtect\webserver\usr\servers\veProfile\workarea\\90\data\cacheAdapt\.app.manager_60\WEB-INF\lib\log4j-1.2-api-2.13.3.jar\ Note: Given the potential for the IBM Spectrum Protect Backup-Archive Client to be installed in a non-default location, it may be beneficial to simply search against locations of log4j*.jar and remove prior versions accordingly against locations where Spectrum Protect has placed these files. Remove the following log4j files from the following locations:Ĭ:\IBM\SpectrumProtect\webserver\usr\servers\veProfile\apps\FR_API.war\WEB-INF\libĬ:\Program Files\IBM\SpectrumProtect\Framework\VEGUI\LibĬ:\Program Files\Tivoli\TSM\baclient\plugins\vcloudsuite\sdk Unzip the apache-log4j-2.17.1-bin.zip fileĥ. Stop the following Windows services if present:Ĥ. IBM Spectrum Protect for BAClient Web Serverģ. IBM Spectrum Protect for Virtual Environments Web Server IBM Spectrum Protect for Virtual Environments Derby Database(vmcli) In Windows Services, switch the following services if present to manual to avoid automatic restarts during patching process: Download the following from Apache - Apache Log4j 2.17.1 or later can be used.Īpache Log4j 2.17.1 is used in these directions as an example.Īpache Log4j 2 binary(zip): apache-log4j-2.17.1-bin.zipĢ. >Directions to replace the log4j jars files:ġ. The Web GUI is tied to the following items in the IBM Spectrum Protect Backup-Archive Client. IBM Spectrum Protect Backup-Archive Client ![]() IBM Spectrum Protect for Virtual Environments: Data Protection for VMware, IBM Spectrum Protect for Virtual Environments: Data Protection for Hyper-V, and the Data Movers used by IBM Spectrum Protect for Virtual Environments IBM Spectrum Protect for Virtual Environments: Data Protection for VMware Data Movers used by IBM Spectrum Protect for Virtual Environments.IBM Spectrum Protect Backup-Archive Client.IBM Spectrum Protect for Virtual Environments: Data Protection for Hyper-V.IBM Spectrum Protect for Virtual Environments: Data Protection for VMware.The following products/components can use this procedure: ![]() Procedure to Manually Replace log4j jar files ![]() IBM strongly recommends addressing this vulnerability now by upgrading to the fixed level using the links provided in the Remediation/Fixes section instead of using the manual process below. IBM Spectrum Protect for Virtual Environments: Data Protection for Hyper-V Affected Versions IBM Spectrum Protect for Virtual Environments: Data Protection for VMware Affected Versions IBM Spectrum Protect Backup-Archive Client Affected Versions Note: The below fix packages include Apache Log4j 2.17.1. IBM strongly recommends addressing these vulnerabilities now by upgrading to the fixed level instead of using the manual process described under Workarounds and Mitigations. ![]()
0 Comments
Leave a Reply. |