Forum Discussion

stevelsmith's avatar
stevelsmith
New Contributor
4 years ago
Solved

SoapUI 5.5.0 Log4j vulnerability

Hi,   We are running Soap 5.5.0 ( currently not sure if this just a free version or a paid version)  with log4j-1.2.14.jar can you tell me if a update is going to be released that resolves the Log4...
SOAP
  • Yshippin's avatar
    Yshippin
    12 years ago
    You can cancel stop on error in the project properties, but your best option is probably the try and catch.

    In anycase it will be best if you ensure that the script will not throw exceptions (add verifications etc..).

Sudheshnarao3's avatar
Sudheshnarao3
New Member
4 years ago

Hi There, I'm after the same issue and our organization also have version SoapUI 5.5.0. So do you recommend to download the 5.6.1 version you've mentioned to get the vulnerability issue fixed? or Do we need to wait for you to release a version which fixed the Log4j vulnerability?

stevelsmith's avatar
stevelsmith
New Contributor
4 years ago

Hi,

 

I believe that we have to wait as the jar released by Apache is for apache servers so if you were to copy the file into the Soapui application it would not pick it up. We have renamed the jar file to stop the application working at the moment.

 

Steve