Neotys.com

Unanswered question

Is Neoload vulnerable for the current log4j CVE?

Is Neoload vulnerable for the current log4j vulnerability?

Robert B.

Robert B.

Level
0
13 / 100
points
Answer count
2 answers
Category
Installation / Licensing
Author name
Robert B.
Date
December 14, 2021
over 2 years ago
Hits
viewed 399 times
question
q

Answers

Nouredine A.
Nouredine A.

Nouredine A.

Level
4
5000 / 5000
points
Team

NeoLoad Web or the Neotys Team Server are not impacted by this vulnerability. Only NeoLoad versions from 7.9.xx-->7.11.xx are impacted.

New versions are already available which contains the log4j libraries 2.15 that resolves the issue. So if needed you can download the 7.9.2, 7.10.2 or 7.11.2 versions.

Author name
Nouredine A.
Date
answer
a
Markus T.
Markus T.

Markus T.

Level
0
54 / 100
points

Yes.
Neoload7.11/lib/log4j-api-2.11.2.jar
Neoload7.11/lib/log4j-core-2.11.2.jar
Neoload7.11/lib/log4j-jul-2.11.2.jar
There is a new 7.11.2 version available that fixes the vulnerability.

Author name
Markus T.
Date
answer
a