[Info-vax] Java, log4j, log4shell, and OpenVMS: CVE-2021-44228, CVE-2021-45046

[Arne Vajhøj]

On 12/14/2021 8:08 PM, Stephen Hoffman wrote:
> On 2021-12-14 19:56:24 +0000, Jim said:
>> On 12/14/2021 11:39 AM, Stephen Hoffman wrote:
>>> HPE has indicated that 3PAR and some other products are vulnerable to
>>
>> Seems HPE now reporting that the 3PAR StorServ is not vulnerable.
>>
>> https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-a00120086en_us 
> 
> You're looking at the "not vulnerable" list from HPE.
> 
> You'll also want to review the "vulnerable" list from HPE, for some 
> problematic 3PAR and XP apps.
> 
> https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04215en_us 

I saw a list for multiple vendors:

https://www.continuitysoftware.com/blog/centralized-list-of-storage-and-backup-systems-affected-by-zero-day-log4shell-vulnerability-cve-2021-44228

It is a pretty long list!

:-(

Arne