Does Splunk UBA use/require below Log4j 1.2?
Currently below was flagged during the VA scanning thus I am not sure whether we can remove or require to update it?
Apache Log4j 1.2
@YJ ,
In Splunk UBA version 5.3.0, all Log4j related jars in the OS packages have either been removed or replaced by Reload4j besides the following.
https://docs.splunk.com/Documentation/UBA/5.3.0/ReleaseNotes/RemoveLog4j
If you are below version 5.3.0 I would update.