Imperva Cyber Community

 View Only
  • 1.  Imperva ragent - does it use log4j? Any impact?

    Posted 12-15-2021 03:25
    Hi All,

    As per above, the advisory that I saw mentioned as not impacted.

    Can see below path:


    /opt/imperva/ragent/bin/java/lib/log4j-1.2.17.jar


    Due to legacy agent?
    #ImpervaAgent

    ------------------------------
    MF S
    IT Security
    Kuala Lumpur
    ------------------------------


  • 2.  RE: Imperva ragent - does it use log4j? Any impact?

    Community Manager
    Posted 12-15-2021 03:34

    Hi MF S,

    I think this link should help...

    Imperva Documentation Portal - Log4j2 vulnerability - CVE-2021-44228

    Thanks,

    Sarah



    ------------------------------
    Sarah Lamont(csp)
    Digital Community Manager
    ------------------------------



  • 3.  RE: Imperva ragent - does it use log4j? Any impact?

    Posted 12-15-2021 04:22
    Hi @Sarah Lamont(csp)

    This exactly what i saw previously....but seems inconsistent with the statement vs what we see in ragent folder


    On-Premises Agents - Log4j is not used



    ------------------------------
    MF S
    IT Security
    Kuala Lumpur
    ------------------------------



  • 4.  RE: Imperva ragent - does it use log4j? Any impact?
    Best Answer

    Community Manager
    Posted 12-15-2021 05:18

    Hi MF S,

    Thanks for coming back to me. The agents team gave me the following response:

    Big-Data agents have log4j as part of Java package, because we handle injection into java running apps.
    The log4j version is unaffected, and we don't use it for logging.
    Agent code is based on C/C++ and not Java.

    I hope this helps.



    ------------------------------
    Sarah Lamont(csp)
    Digital Community Manager
    ------------------------------



  • 5.  RE: Imperva ragent - does it use log4j? Any impact?

    Posted 12-15-2021 09:31
    Thanks a bunch Sarah

    This a great relive and news for all i guess, perhaps can consider to add this supplementary information into the KB article.


    Cheers

    ------------------------------
    MFS
    ------------------------------



  • 6.  RE: Imperva ragent - does it use log4j? Any impact?

    Community Manager
    Posted 12-16-2021 05:19

    Of course! I will forward this feedback to the team managing the articles.

    Thank you,

    Sarah



    ------------------------------
    Sarah Lamont(csp)
    Digital Community Manager
    ------------------------------