question

81903399 avatar image
0 Votes"
81903399 asked AlexZhu-MSFT commented

log4j vulnerability

Microsoft,
We are currently using MS Orchestrator 2012 and are wondering if this utilizes log4j

Designer: 7.1.3022.0

Orchestrator Management Servers:
SOMPICMVVAW01: 7.1.3022.0

Libraries:
Compression-6-4109999.op4caw: 7.1.3022.0
Compression-6-4109999.op4saw: 7.1.3022.0
Database-14-40801.op4caw: 7.1.3022.0
Database-14-40801.Op4saw: 7.1.3022.0
DataMapper-689-5000001.op4caw: 7.1.3022.0
DataMapper-689-5000001.op4saw: 7.1.3022.0
DateTime-1-5000001.op4saw: 7.1.3022.0
Email-2-40803.op4saw: 7.1.3022.0
Email-2-4109999.op4caw: 7.1.3022.0
Encryption-628-5000001.op4caw: 7.1.3022.0
Encryption-628-5000001.op4saw: 7.1.3022.0
EncryptionDomainLibResources.dll: 7.1.3022.0
FileAndFolderFOCommon.dll: 7.1.3022.0
FileList-38-40801.op4cbw: 7.1.3022.0
FileManagement-4-40802.op4caw: 7.1.3022.0
FileManagement-4-40802.op4saw: 7.1.3022.0
FileManagementClientExtension.dll: 7.1.3022.0
FileManagementDomain.dll: 7.1.3022.0
FileManagementResource.dll: 7.1.3022.0
FileManagementServerExtension.dll: 7.1.3022.0
FileMonitorClientExtension.dll: 7.1.3022.0
FileMonitorDomain.dll: 7.1.3022.0
FileMonitorServerExtension.dll: 7.1.3022.0
FolderMonitorClientExtension.dll: 7.1.3022.0
FolderMonitorDomain.dll: 7.1.3022.0
FolderMonitorServerExtension.dll: 7.1.3022.0
FormatDateTimeClientExtension.dll: 7.1.3022.0
FormatDateTimeDomainLibResources.dll: 7.1.3022.0
FormatDateTimeServerExtension.dll: 7.1.3022.0
Internet-13-40801.op4caw: 7.1.3022.0
Internet-13-4109999.op4saw: 7.1.3022.0
ManageTextFileClientExtension.dll: 7.1.3022.0
ManageTextFileDomain.dll: 7.1.3022.0
ManageTextFileServerExtension.dll: 7.1.3022.0
Microsoft.SystemCenter.Orchestrator.Integration.Toolkit.IP.ClientExtension.dll: 7.0.359.0
Microsoft.SystemCenter.Orchestrator.Integration.Toolkit.IP.ServerExtension.dll: 7.0.359.0
Microsoft.SystemCenter.Orchestrator.Integration.Toolkit.Wizard.Images.dll: 7.0.359.0
MpCore4LibResources.dll: 7.1.3022.0
MpCoreLibResources.dll: 7.1.3022.0
NetBrowser-40-40801.op4cbw: 7.1.3022.0
NetUseObjectsClientExtension.dll: 7.1.3022.0
NetUseObjectsServerExtension.dll: 7.1.3022.0
Network-24-407.op4caw: 7.1.3022.0
Network-24-40801.op4saw: 7.1.3022.0
ObjectResources.dll: 7.1.3022.0
OpCoreLibResources.dll: 7.1.3022.0
OpToolsLibResources.dll: 7.1.3022.0
ProcessBrowser-69-40801.op4cbw: 7.1.3022.0
QueryXmlClientExtension.dll: 7.1.3022.0
QueryXmlServerExtension.dll: 7.1.3022.0
RandomStringClientExtension.dll: 7.1.3022.0
RandomStringDomainLibResources.dll: 7.1.3022.0
RandomStringServerExtension.dll: 7.1.3022.0
RASPhoneBook-56-40801.op4sbw: 7.1.3022.0
RASPhoneBrowser-56-40801.op4cbw: 7.1.3022.0
RunScriptClientExtension.dll: 7.1.3022.0
RunScriptDomain.dll: 7.1.3022.0
RunScriptServerExtension.dll: 7.1.3022.0
Schedule-1-40801.op4caw: 7.1.3022.0
SnmpClient-119-4109999.op4caw: 7.1.3022.0
SNMPClientExtension.dll: 7.1.3022.0
SnmpDomainLibResources.dll: 7.1.3022.0
SnmpService-119-4109999.op4saw: 7.1.3022.0
SSHClient-117-4109999.op4caw: 7.1.3022.0
SSHService-117-4109999.op4saw: 7.1.3022.0
StandardObjects.dll: 7.1.3022.0
SystemCenter.IntegrationPack.ExchangeAdmin.Images.dll: 7.1.3007.0
SystemCenter.IntegrationPack.ExchangeUser.Images.dll: 7.1.3005.0
SystemUtilities-16-40801.op4caw: 7.1.3022.0
SystemUtilities-16-40802.op4saw: 7.1.3022.0
TextFile-15-40801.op4caw: 7.1.3022.0
TextFile-15-40801.op4saw: 7.1.3022.0
WebServiceChannelLibResources.dll: 7.1.3022.0
WebServicesBase.dll: 7.1.3022.0
WebServicesClientExtension.dll: 7.1.3022.0
WebServicesProxy.dll: 7.1.3022.0
WebServicesServerExtension.dll: 7.1.3022.0
WindowsUtilities-21-40801.op4caw: 7.1.3022.0
WindowsUtilities-21-40801.op4saw: 7.1.3022.0
Wmi-8-40802.op4caw: 7.1.3022.0
Wmi-8-40809.op4saw: 7.1.3022.0
XsltTransformClientExtension.dll: 7.1.3022.0
XsltTransformServerExtension.dll: 7.1.3022.0

msc-orchestrator
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

StefanHorz avatar image
1 Vote"
StefanHorz answered AlexZhu-MSFT commented

Hi @81903399 ,

No, System Center Orchestrator 2012 and above does not have log4j components. The Orchestrator WebServices are based on IIS, and not on Apache.

Regards,
Stefan

· 1
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AlexZhu-MSFT avatar image AlexZhu-MSFT ·

Hi,

As StefanHorz mentioned, Microsoft System Center suite do NOT utilize Log4j and have nothing to do with the zero-day vulnerability in Log4j. Apache Log4j is a Java-based logging utility. It is part of the Apache Logging Services and one of several Java logging frameworks.

Regards,
Alex

0 Votes 0 ·