メイン コンテンツに進む
  • すばやく簡単にご注文が可能
  • 注文内容の表示、配送状況をトラック
  • 会員限定の特典や割引のご利用
  • 製品リストの作成とアクセスが可能
  • 「Company Administration(会社情報の管理)」では、お使いのDell EMCのサイトや製品、製品レベルでのコンタクト先に関する情報を管理できます。

文書番号: 000194627


DSA-2021-297: Dell EMC Streaming Data Platform Security Update for Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832)

概要: Dell EMC Streaming Data Platform remediation is available for the Apache Log4j Remote Code Execution Vulnerability that may be exploited by malicious users to compromise the affected system. Dell recommends implementing this remediation as soon as possible in light of the critical severity of the vulnerability. ...

文書の内容


影響

Critical

詳細

Third-Party Component CVEs More information
Apache Log4j CVE-2021-44228 Apache Log4j Remote Code Execution
 
CVE-2021-45046
CVE-2021-45105
CVE-2021-44832

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.
Third-Party Component CVEs More information
Apache Log4j CVE-2021-44228 Apache Log4j Remote Code Execution
 
CVE-2021-45046
CVE-2021-45105
CVE-2021-44832

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.
デル・テクノロジーズでは、すべてのお客様に対して、CVSSベース スコアに加えて、特定のセキュリティの脆弱性に付随する潜在的な重要度に影響する可能性のある現状スコアや環境スコアも考慮することをお勧めしています。

影響を受ける製品と修復

Product Affected Versions Updated Versions Link to Update
Dell EMC Streaming Data Platform
 
1.1, 1.2, 1.2 HF1, 1.3, and 1.3.1 1.3.1.1 and later Download SDP 1.3.1.1
 

Note: Dell EMC Streaming Data Platform (SDP) has remediated CVE-2021-44228, CVE-2021-45046 in version 1.3.1 and later. Although CVE-2021-45105, CVE-2021-44832 were not exploitable in SDP, Apache Log4j is upgraded to 2.17.1 in SDP 1.3.1.1
Product Affected Versions Updated Versions Link to Update
Dell EMC Streaming Data Platform
 
1.1, 1.2, 1.2 HF1, 1.3, and 1.3.1 1.3.1.1 and later Download SDP 1.3.1.1
 

Note: Dell EMC Streaming Data Platform (SDP) has remediated CVE-2021-44228, CVE-2021-45046 in version 1.3.1 and later. Although CVE-2021-45105, CVE-2021-44832 were not exploitable in SDP, Apache Log4j is upgraded to 2.17.1 in SDP 1.3.1.1

変更履歴

RevisionDateDescription
1.02021-12-16Initial Release
1.12021-12-17Updated the SDP 1.3.1 download link
1.22022-01-19Added version 1.3.1.1 and additional CVE-2021-45105, CVE-2021-44832

関連情報


文書のプロパティ


影響を受ける製品

Streaming Data Platform

製品

Streaming Data Platform Family

最後に公開された日付

01 2月 2022

文書の種類

Dell Security Advisory