log4j - remove files from ePO folders ...\installer and ...\updates

[User_548887]

Dear All,

we are running ePO 5.10 upd 13 o prem. Out vulnerability scanner detects several vulnerable Log4J binaries on the system in the paths below. Could you please let us know how these can be remved?

(C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Installer\Core\catalina-bak\lib\log4j-1.2.17.jar)
(C:\Program Files (x86)\McAfee\ePolicy Orchestrator\updates\CU-9\none-server\lib.bak\log4j-1.2.17.jar)
(C:\Program Files (x86)\McAfee\ePolicy Orchestrator\updates\CU-7\none-server\lib.bak\log4j-1.2.17.jar)
(C:\Program Files (x86)\McAfee\ePolicy Orchestrator\updates\CU-12\none-server\lib.bak\log4j-1.2.17.jar)

Thank you!

[cdinet · Accepted solution]

Those are backup folders for the updates.  They can be removed, but the downside of that is that you won't be able to roll back to a lower version and it may affect disaster recovery procedures that try to restore to same cu version.  The last part I haven't tested, but the first part is a definite issue.  That may or may not be a problem for you, especially if you don't have issues and don't need to roll back.

[User_548887]

so, I could remove the folders in set in bold below?

• (C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Installer\Core\catalina-bak\lib\log4j-1.2.17.jar)
• (C:\Program Files (x86)\McAfee\ePolicy Orchestrator\updates\CU-9\none-server\lib.bak\log4j-1.2.17.jar)
• (C:\Program Files (x86)\McAfee\ePolicy Orchestrator\updates\CU-7\none-server\lib.bak\log4j-1.2.17.jar)
• (C:\Program Files (x86)\McAfee\ePolicy Orchestrator\updates\CU-12\none-server\lib.bak\log4j-1.2.17.jar)

Thank you!

[cdinet]

Yes, as long as you are aware of the drawbacks of doing so that were mentioned.