[JENKINS-67424] Checkmarx Plugin contains vulnerability in log4j-core version 2.16

2.16 has been found to also contain vulnerabilities and requires an update to 2.17 (2.16 however is less vulnerable than 2.15).

is related to

JENKINS-67353 log4j CVE-2021-44228 and CVE-2021-45046 in Jenkins

links to

Log4j 2.16.0 is not sufficient. Upgrading to 2.17.0 #85

lkis01 created issue - 2021-12-21 19:49

lkis01 made changes - 2021-12-21 19:49

Issue Type

Original: Task [ 3 ]

New: Bug [ 1 ]

Ian Williams made changes - 2021-12-23 17:58

Link

New: This issue is related to JENKINS-67353 [ JENKINS-67353 ]

Ian Williams made changes - 2021-12-23 18:03

Remote Link

New: This issue links to " Log4j 2.16.0 is not sufficient. Upgrading to 2.17.0 #85 (Web Link)" [ 27313 ]

lkis01 made changes - 2022-01-11 20:47

Released As		New: https://plugins.jenkins.io/checkmarx/#releases
Resolution		New: Fixed [ 1 ]
Status	Original: Open [ 1 ]	New: Resolved [ 5 ]

Jenkins CERT Bot made changes - 2022-01-29 21:52

Labels

New: jcabot:001

Jenkins CERT Bot made changes - 2022-02-02 20:26

Labels

Original: jcabot:001

New: jcabot:001 jcabot:002

Jenkins