ServiceDesk Plus Log4j.jar

ServiceDesk Plus Log4j.jar

Is anyone aware of plans for Zoho to update Log4j in ServiceDesk Plus? Current file I have ServiceDesk\lib\log4j.jar is dated 17/03/2020 and there are no new service packs that I can see that related to the recently announced security vulnerabilities.

Unsure if MESDP would actually have an exploitable vuln but considering replacing the library file myself anyway. Does anyone know which log4j file it is precisely? API, Core, appserver, web etc etc etc. There are many to choose from.

For anyone not in the know but it's all over the news - https://logging.apache.org/log4j/2.x/security.html
        New to M365 Manager Plus?
        New to M365 Manager Plus?
          New to RecoveryManager Plus?
          New to RecoveryManager Plus?
            New to Exchange Reporter Plus?
            New to Exchange Reporter Plus?
              New to SharePoint Manager Plus?
              New to SharePoint Manager Plus?
                See all integrations
                New to ADManager Plus?

                  New to ADSelfService Plus?

                  Start your free trial





                            Related Products