Forum Discussion

Jazzy's avatar
Jazzy
Occasional Visitor
3 years ago

Does SoapUI 5.6.0 has log4j vulnerability?

I have installed SoapUI 5.6.0 and it does have "log4j-1.2.14.jar" file present at SmartBear\SoapUI-5.6.0\lib location.  Does this file have vulnerability? Log4J file < 2.15 is vulnerable. So, Can yo...
SOAP
  • techguy24's avatar
    techguy24
    Occasional Visitor
    3 years ago

    I see the new update was released. However, it contains 2.16 which is not secure either. Will 2.17 be released soon?

    • TanyaYatskovska's avatar
      TanyaYatskovska
      SmartBear Alumni (Retired)
      3 years ago

      Hi,

      SmartBear is closely monitoring and analyzing Apache guidance related to the Log4j2 Remote Code Execution (RCE) Vulnerabilities stemming from CVE-2021-44228 and associated vulnerabilities. Please follow this page for more information:

      https://smartbear.com/security/cve-2021-44228/