Vulnerability of the UI Web Gateway - Log4j

[lecter]

Hello, I have a question to the SB SB10377 (https://kc.mcafee.com/agent/index?page=content&id=SB10377). The SB10377 says (among other things) how to mitigate the vulnerability of the McAfee Web Gateway. If I understod right, it means that the vulnerability affects only the (HTML) UI? If the access to the UI is controlled by a firewall, will the UI safe?

[asabban]

Hello,

depends on what the firewall controls 🙂 But yes, in case the firewall only allows trusted users to access the UI, this will limit the risk to only the trusted users.

Best,
Andre

[lecter]

Hello,

Thank you for your response. I meant especially whether the proxy is vulnerable through the (common) traffic or just through the UI.

[asabban · Accepted solution]

Hi,

UI only.

Best,
Andre

[aok71]

Hi, also a question about Log4j.

We upgraded to 10.2.5, the Mitigation say, not vulnerable, but we are forced to use 2.17.1

See CVE-2021-44852, will there be a next Update with 2.17 at least ?

And what about the Log4J Versions 1.2.x

I know the System is ok, only the Ui can be vulnarable, but why does McAfee leave such old Versions in their Applications ?

Best Regards

Ahmet