I am working on remediating old versions of Apache Log4j
from my company’s AnalyticsPlus installations.
We have upgraded AnalyticsPlus over time from build 4600 to 5210 over about 13 upgrade
steps. In our install directory we then have about 13 instances of this directory path where XXXX is each
Deeper down into these directories many of them have older versions
of Apache Log4j: C:\ManageEngine\AnalyticsPlus\Patch\ManageEngine_Analytics_Plus-5020-SP-0\SERVER\lib\log4j-1.2.17.jar
If the current running version of AnalyticsPlus is using the
current version of Log4j, I am looking to get rid of the old versions of Log4j,
even if they are not actively being used any more.
My questions are: