7.2.1.2
- IBM Common Licensing supported
- Bug fixes
- Recommended security fixes for UrbanCode Deploy
2.5.1.ifix01
- Insights
- Security
- Bug fixes
CVE-2021-44228 aka log4shell and UrbanCode Build Security Bulletin Information
Security Bulletin: CVE-2021-4104 CVE-2021-44228 CVE-2019-17571 IBM UCB server releases before 6.1.7.2 are impacted by CVE-2021-4104 (a weaker variant of CVE-2021-44228) Summary: IBM UCB server releases before 6.1.7.2 are impacted by CVE-2021-4104 (a weaker variant of CVE-2021-44228). The product uses log4j 1.2 which lacks the features need to construct the most dangerous form of the exploit.
CVE-2021-44228 aka log4shell and UrbanCode Release Security Bulletin Information
Security Bulletin: CVE-2021-4104 CVE-2021-44228 CVE-2019-17571 IBM UCR server releases before 6.2.5.2 are impacted by CVE-2021-4104 (a weaker variant of CVE-2021-44228) Summary: IBM UCR server releases before 6.2.5.2 are impacted by CVE-2021-4104 (a weaker variant of CVE-2021-44228). The product uses log4j 1.2 which lacks the features need to construct the most dangerous form of the exploit.
CVE-2021-44228 aka log4shell and UrbanCode Velocity Security Bulletin Information
Summary IBM UrbanCode Velocity is vulnerable to CVE-2021-44228, Apache Log4j 2 / Log4Shell, as the `urbancode/velocity-se-rcl-web-client` is built upon Java and leverages Apache Lo4j 2. The other IBM UrbanCode Velocity services are built upon JavaScript which use Log4js and are not affected. Vulnerability Details Refer to the National vulnerability database (NVD) for the most current
CVE-2021-44228 aka log4jshell and UrbanCode Deploy Security Bulletin Information
Security Bulletin: CVE-2021-4104 CVE-2021-44228 CVE-2019-17571 IBM UCD server/agent/relay releases before 7.1.2.1 are impacted by CVE-2021-4104 (a weaker variant of CVE-2021-44228) Summary: IBM UCD server/agent/relay releases before 7.1.2.1 are impacted by CVE-2021-4104 (a weaker variant of CVE-2021-44228). The product uses log4j 1.2 which lacks the features need to construct the most dangerous form of the exploit.