CVE-2021-44228 Log4j formatMsgNoLookups=true for BigFix Compliance
| 0 Votes |
Description
Updates the BigFix Compliance jvm.options file to disable log message lookups by adding
-Dlog4j2.formatMsgNoLookups=true
to the jvm.options file for BigFix Compliance. This is effective only for Compliance versions 2.0.2 or higher.
Property Details
| 26891 | |
| Alpha - Code that was just developed | |
| CVE-2021-44228 Log4j formatMsgNoLookups=true for BigFix Compliance | |
| BESC | |
| Internal | |
| 12/10/2021 12:00:00 AM | |
| CVE, CVE-2021-44228, Log4j, vulnerability, Compliance | |
| JasonWalker on 12/11/2021 9:32:29 AM | |
| JasonWalker on 12/11/2021 9:32:29 AM | |
| 703 Views / 20 Downloads | |
* Average over 0 ratings.
** Log In or Register to add your rating.
|
Relevance
windows of operating system AND (if exists property "in proxy agent context" then not in proxy agent context else true)
| Used in 2 fixlets | * Results in a true/false |
exists keys ("IBM BigFix Compliance";"BigFix Compliance") of keys "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of x64 registry
| Used in 1 fixlet | * Results in a true/false |
((not exists line whose ((it starts with "-Dlog4j2.formatMsgNoLookups=true") ) of it) ) of file ((((value "InstallLocation" of keys "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Bigfix Compliance" of x64 registry) | (value "InstallLocation" of keys "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IBM Bigfix Compliance" of x64 registry))) as string & "\wlp\usr\servers\server1\jvm.options")
Actions
Action 1 (default)
Action Link Click
here to deploy this action.
Script Type
BigFix Action Script
parameter "jvm_options_folder" = "{((((value "InstallLocation" of keys "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Bigfix Compliance" of x64 registry) | (value "InstallLocation" of keys "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IBM Bigfix Compliance" of x64 registry))) as string & "\wlp\usr\servers\server1\")}"
parameter "jvm_options_backup" = "{parameter "jvm_options_folder" as string & "jvm.old.options"}"
parameter "jvm_options_file" = "{parameter "jvm_options_folder" as string & "jvm.options"}"
delete __appendfile
appendfile {concatenation "%0d%0a" of lines of file (parameter "jvm_options_file")}
appendfile -Dlog4j2.formatMsgNoLookups=true
delete "{parameter "jvm_options_backup"}"
move "{parameter "jvm_options_file"}" "{parameter "jvm_options_backup"}"
copy __appendfile "{parameter "jvm_options_file"}"
waithidden net stop TEMA
waithidden net start TEMA
Success Criteria
This action will be considered successful when the applicability relevance evaluates to false.
Sharing
| Social Media: |
Comments
 |
|
| thanks! | |
