IBM License Metric Tool (ILMT)

IBM License Metric Tool (ILMT)

Connect with Db2, Informix, Netezza, open source, and other data experts to gain value from your data, share insights, and solve problems.

 View Only
  • 1.  migration\product\lib\log4j-1.2.16.jar vulnerability

    Posted 02/16/23 02:44 PM

    Good day,  the following vulnerability reported in ILMT 9.2.26 or higher as shown below.  Is this file still needed or entire folder migration\SUA_2.x\lib can be deleted?   Please advise.  Thanks.

    Path              : C:\Program Files\ibm\LMT\migration\SUA_2.x\lib\log4j-1.2.16.jar
      Installed version : 1.2.16



    ------------------------------
    York Ly
    ------------------------------


  • 2.  RE: migration\product\lib\log4j-1.2.16.jar vulnerability

    Posted 02/17/23 02:21 AM

    Hello York,

    'C:\Program Files\ibm\LMT\migration' folder can be removed altogether as it's not used anymore.



    ------------------------------
    Thank you,
    Oktawian

    Oktawian Powązka, L3 Support
    IBM License Metric Tool
    ------------------------------



  • 3.  RE: migration\product\lib\log4j-1.2.16.jar vulnerability

    Posted 02/20/23 01:59 PM

    Thanks Oktawian for quick response.   Is there a plan to completely remove this ibm\LMT\migration folder in the future release?   Thanks.



    ------------------------------
    York Ly
    ------------------------------



  • 4.  RE: migration\product\lib\log4j-1.2.16.jar vulnerability

    Posted 02/20/23 03:39 PM

    Already working on it...

    Hopefully, in the next release: 9.2.31



    ------------------------------
    Thank you,
    Oktawian

    Oktawian Powązka, L3 Support
    IBM License Metric Tool
    ------------------------------