Remediate log4j Vulnerabilities

We have mongo db software installed and our security team is asking us to remediate the log4j from the binaries. Please let us know the process to upgrade the log4j to latest secure version.

/mongo/opsmanager/lib/log4j-1.2.15.jar

Hi @Bharat_Kilaru welcome to the community!

Since Ops Manager is part of the Enterprise Advanced subscription and is not community supported, you might want to contact sales so you can have the appropriate remediation for this.

In the meantime, this was discussed in the thread Update on Log4Shell Vulnerability (CVE-2021-44228) and also the blog post Log4Shell Vulnerability (CVE-2021-44228, CVE-2021-45046 and CVE-2021-45105) and MongoDB | MongoDB Blog

Best regards
Kevin