IBM License Metric Tool (ILMT)

 View Only
  • 1.  migration\product\lib\log4j-1.2.16.jar vulnerability

    Posted Thu February 16, 2023 02:44 PM

    Good day,  the following vulnerability reported in ILMT 9.2.26 or higher as shown below.  Is this file still needed or entire folder migration\SUA_2.x\lib can be deleted?   Please advise.  Thanks.

    Path              : C:\Program Files\ibm\LMT\migration\SUA_2.x\lib\log4j-1.2.16.jar
      Installed version : 1.2.16



    ------------------------------
    York Ly
    ------------------------------


  • 2.  RE: migration\product\lib\log4j-1.2.16.jar vulnerability

    Posted Fri February 17, 2023 02:21 AM

    Hello York,

    'C:\Program Files\ibm\LMT\migration' folder can be removed altogether as it's not used anymore.



    ------------------------------
    Thank you,
    Oktawian

    Oktawian Powązka, L3 Support
    IBM License Metric Tool
    ------------------------------



  • 3.  RE: migration\product\lib\log4j-1.2.16.jar vulnerability

    Posted Mon February 20, 2023 01:59 PM

    Thanks Oktawian for quick response.   Is there a plan to completely remove this ibm\LMT\migration folder in the future release?   Thanks.



    ------------------------------
    York Ly
    ------------------------------



  • 4.  RE: migration\product\lib\log4j-1.2.16.jar vulnerability

    Posted Mon February 20, 2023 03:39 PM

    Already working on it...

    Hopefully, in the next release: 9.2.31



    ------------------------------
    Thank you,
    Oktawian

    Oktawian Powązka, L3 Support
    IBM License Metric Tool
    ------------------------------