[LOG4J2-3233] Log4j 1.x.xx vulnerability assessment

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Information Provided
• Component/s: Log4j 1.2 bridge, Log4j-to-SLF4J

Environment

PRODUCTION

• Assignee: Unassigned
• Reporter: Ram Subramanian
• Created: 15/Dec/21 02:23
• Updated: 15/Dec/21 09:13
• Resolved: 15/Dec/21 08:53

Description

Hi Team, 

 

We are running legacy decade old applications using log4j 1.2.13 and log4j 1.2.17 , log4j 1.3.xx and 1.4.xx

 

Question: 

are the above older log4j 1.xx versions been impacted by the security vulnerability for log4j2 

 

Any help and clarity is much appreciated