CVE-2021-44228

[dconverse]

Splunk Enterprise (on-prem) is reported as having a hotfix for this CVE 8.2.3.2, but I am unable to locate the hotfix. We do not run DFS but management still wants this hotfix applied. Also is there a way to test for the vulnerability before and after the hotfix?

[venkatasri]

Hi @dconverse 

You could track the status here and find relevant info for your products in use.

https://www.splunk.com/en_us/blog/bulletins/splunk-security-advisory-for-apache-log4j-cve-2021-44228...

---

An upvote would be appreciated if this reply helps!