CVE-2021-44228 - Is OCS Inventory affected?

Question

On the 9th of December a Zero-Day Exploit targeting Java Library Log4j has been made public. (CVE-2021-44228). I have not been able to verify 100 percent myself if OCS Inventory is affected or not.
It seems like OCS uses liblog-log4perl-perl and not log4j directly. Could you please clarify if OCS is affected?

http://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-44228

Answer 1

Hi,

OCS is not vulnerable to Log4j vulnerability. Most likely most of the applications that use a Log4J port and not Log4j directly are not impacted.

Regards,
Gilles DUBOIS.