topic Re: Minemeld & Log4j in Advanced Threat Prevention Discussions

Minemeld & Log4j

r_buchwalder — Tue, 14 Dec 2021 06:32:07 GMT

Hello

Is Minemeld affected by Log4j?

I see Palo's Security Advisories about Log4j (https://security.paloaltonetworks.com/CVE-2021-44228) - but there is no Minemeld in it.

Is anybody out there, who can answer this?

thanks

roger

Re: Minemeld & Log4j

ymiyashita — Tue, 14 Dec 2021 06:40:58 GMT

MineMeld doesn't use Java components so it's not affected by the Log4j vulnerability.

Re: Minemeld & Log4j

bwsaloum — Mon, 10 Jan 2022 13:19:06 GMT

One of our security scanners flags our minemeld box as being vulnerable, so even if it's not being actively used, there is still some java code that's present on the system. So does anybody have any suggestions?