.jar Files not being fixed with --fix parameter
See original GitHub issueUsing the --fix parameter is not working for the .jar file below:
C:\Program Files\Microsoft SQL Server\150\DTS\Extensions\Common\Jars\log4j-1.2.17.jar 1.2.17 POTENTIALLY_VULNERABLE
The output of log4j2-scan.exe (Ver. 2.2.0) looks like this:
C:\Temp\Logpresso\logpresso-log4j2-scan-2.2.0-win64>log4j2-scan.exe --fix "C:\Program Files\Microsoft SQL Server\150\DTS\Extensions\Common\Jars\log4j-1.2.17.jar"
Logpresso CVE-2021-44228 Vulnerability Scanner 2.2.0 (2021-12-18)
This command will remove JndiLookup.class from log4j2-core binaries. Are you sure [y/N]? y
Scanning directory: C:\Program Files\Microsoft SQL Server\150\DTS\Extensions\Common\Jars\log4j-1.2.17.jar
Scanned 0 directories and 1 files
Found 0 vulnerable files
Found 0 potentially vulnerable files
Found 0 mitigated files
Fixed 0 vulnerable files
Completed in 0.00 seconds
Every hint is highly appreciated.
Thank you.
Issue Analytics
- State:
- Created 2 years ago
- Comments:15 (7 by maintainers)
Top Results From Across the Web
unable to execute the jar file using java program. i need to ...
1 Answer 1 ... The issue is what you're passing to the Jar file when calling it. Your Jar file is set to...
Read more >How To FIX Jar Files Opening As Winrar | Tutorial - YouTube
Today, you will learn how to fix Java files from opening as Winrar files on Windows. This video will demonstrate two methods of...
Read more >How to run a Jar file | TechTarget - TheServerSide.com
Run the JAR file on the command line or terminal window if a double-clicking fails. If you do not have Java installed, and...
Read more >Unable to run .jar files by double-clicking them on Windows 7
jar files I am trying to run, some are GUI Swing applications and some open the system console (if not already open) using...
Read more >Jarfix - Johann N. Löfflmann
If you doubleclick on a jar file, and your Java application does not start, your .jar association has been hijacked. You can fix...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Use:
./log4j2-scan --scan-log4j1 --fix
After
--fix
has been applied, a new scan shows no mitigation note (mitigated)