Forum Discussion
We upgraded to 5.7 however our scans are still flagging a security issue with LOG4J. I thought 5.7 would have corrected this...Any advice?
Path : C:\Program Files\SmartBear\SoapUI-5.7.0\hermesJMS\lib\log4j-1.2.15.jar
Installed version : 1.2.15
Hi KeithT ,
Hermes JMS is not supported by SoapUI since 5.6.0, however there's still an option to install it.
If you install SoapUI 5.7.0 without Hermes, there will be no hermesJMS directory and its obsolete log4j library.
For more on HermesJMS see https://community.smartbear.com/t5/SoapUI-Open-Source-Questions/Is-Hermes-gone/m-p/225651 .
Best regards,
Karel
- KeithT3 years agoOccasional Contributor
Thanks Karel! That is what we found yesterday while troubleshooting and removing the component is the path we are taking. So since it's unsupported there is no plan for a fix specific to the HermesJMS component correct?
- KarelHusa3 years agoChampion Level 2
KeithT ,
maybe this thread could give you an answer: https://community.smartbear.com/t5/SoapUI-Open-Source-Questions/SoapUI-Open-Source-future/m-p/222292 ?
Best regards,
Karel
- KeithT3 years agoOccasional Contributor
Thanks!
Related Content
- 3 years ago
- 3 years ago
Recent Discussions
- 11 days ago