CVE-2021-44228 impact ?

[jmcg]

Hello,

is ePO and/or Agent Handler are impacted by CVE-2021-44228 ?

Regards,

[vivs]

https://kc.mcafee.com/corporate/index?page=content&id=KB95091

[JC]

Per the latest update on KB95091, the ePO AH is not impacted but ePO Application Server is still under review.

[Siu]

Hello, 

As mentioned on the KB article it is still under review. We update the KB Article as soon as we finished with our review. Please subscribe to the KB Article for the latest Updates. 

[luka_hajnrihar]

Hi,

I have a question regarding the KB article; are you actually investigating all the products in the McAfee portfolio or just the ones listed in the chart?
Specifically, is the McAfee Web Gateway being looked into?

[aguevara]

Please open a request with support to address any specific questions about a specific product

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

[vivs]

Hello All,

@aguevara @Siu @cdinet 

Just wanted to confirm :



ePO-AH CU-11 is also included or this is for only till CU 10.

Thanks

[cdinet]

Per that same kb, cu 11 is under review.

ePolicy Orchestrator Application Server (ePO) 5.10 CU11

Under Review

[vivs]

Thanks for the update @cdinet 

Afaik, Installing the custom apache will break the communication ?

https://logging.apache.org/log4j/2.x/changes-report.html#a2.15.0

This will break the communication if someone is applying it to the AH or ePO, Correct ?

Thanks,

[cdinet]

Correct, any fix has to come through an update specifically for epo.