Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

Article Number: 000194485

Data Protection Central Fix for Apache Log4j Vulnerability

Summary: Fix for Data Protection Central (DPC) 18.2 to 19.5.0-6 Apache Log4j vulnerability.

This article may have been automatically translated. If you have any feedback regarding its quality, please let us know using the form at the bottom of this page.

Article Content

Symptoms

Apache Log4j vulnerability affects DPC versions 18.2 to 19.5.0-6.

Cause

Vulnerability affects the Apache Log4j version in DPC 18.2 to 19.5.0-6.

Resolution

To resolve this issue, do the following steps:
  1. SSH into DPC as admin user, and SU as root user.
  2. Run the command:
service dpc-sso stop
  1. Copy the attached file pingfederate-log4j2-2.16.0-updates_csp_en_US_1.zip, onto DPC server under /tmp directory, and extract the file with the following command:
unzip pingfederate-log4j2-2.16.0-updates_int_en_US_1.zip
  1. Copy the attached script updateLog4jFiles_csp_en_US_1.sh in the updateLog4jFiles_csp.7z zip file onto the DPC server under /tmp directory.
  2. Set execute permissions on the script with the following command:
chmod +x updateLog4jFiles_csp_en_US_1.sh
  1. Run the script with the following command:
./updateLog4jFiles_csp_en_US_1.sh

If the script does not run or returns errors, manually update with the following steps: 
  1. cd /usr/local/dpc/lib/sso/pingfederate/server/default/lib
  2. Copy the zip file jars into this location, for example 
    • cp -f /tmp/dist/pingfederate/server/default/lib/*.jar /usr/local/dpc/lib/sso/pingfederate/server/default/lib
  3. Set the ownership for new jar files with the below.
chown admin:root /usr/local/dpc/lib/sso/pingfederate/server/default/lib/log4j*.jar
chown admin:root /usr/local/dpc/lib/sso/pingfederate/server/default/lib/disruptor.jar
  1. Set the permission for new jar files with the below.
chmod 654 /usr/local/dpc/lib/sso/pingfederate/server/default/lib/log4j*.jar
chmod 654 /usr/local/dpc/lib/sso/pingfederate/server/default/lib/disruptor.jar
  1. Run the command:
service dpc-sso start

Article Properties

Affected Product

Data Protection Central

Last Published Date

15 Dec 2022

Version

11

Article Type

Solution

Back to Top