-
Bug
-
Resolution: Fixed
-
Critical
See JENKINS-67353
Update to 2.15 is not sufficient due to https://nvd.nist.gov/vuln/detail/CVE-2021-45046, it requires 2.16.
This one is less important but will still be detected by scanners and alert all users.
- relates to
-
JENKINS-67932 Jenkins Plugin Micro Focus Application Automation tool - Need this plugin which uses org.apache.logging.log4j:log4j-core:2.17.1 or higher
- Resolved