Sisense is aware of the recently disclosed Apache Log4j vulnerability (CVE-2021-44228). We are actively working to patch any Sisense customers that are affected by this vulnerability. Click the attachment below for continuous updates on recommended guidance for both Linux & Windows OS.
Anonymous
1. The Windows patch script doesn't scan C:\ProgramData\Sisense, which has jars with a dependency on the JndiLookup class, can you please let me know why?
Version 7.1
C:\ProgramData\Sisense\DataConnectors\GoogleSheets\Sisense.GoogleSheets.JVM.1.0.16423.96.0.0\com.sisense.connectors.GoogleSpreadsheetsConnector.jar
Version W20.21.4.10058
C:\ProgramData\Sisense\DataConnectors\Athena\Sisense.Athena.JVM.1.0.16423.20.21.4.10001.0.0\com.sisense.connectors.Athena.jar
C:\ProgramData\Sisense\DataConnectors\GenericJDBC\Sisense.GenericJDBC.JVM.1.0.16423.20.21.4.10001.0.0\com.sisense.connectors.GenericJDBC.jar
C:\ProgramData\Sisense\DataConnectors\GoogleAds\Sisense.GoogleAds.JVM.1.0.16423.10001.0.0\com.sisense.connectors.GoogleAds.jar
C:\ProgramData\Sisense\DataConnectors\GoogleAnalytics\Sisense.GoogleAnalytics.JVM.1.0.16423.10001.0.0\com.sisense.connectors.GoogleAnalytics.jar
C:\ProgramData\Sisense\DataConnectors\GoogleBigQuery\Sisense.Google BigQuery.JVM.1.0.16423.20.21.4.10003.0.0\com.sisense.connectors.GoogleBigQuery.jar
C:\ProgramData\Sisense\DataConnectors\GoogleSheets\Sisense.GoogleSheets.JVM.1.0.16423.20.21.4.10001.0.0\com.sisense.connectors.GoogleSpreadsheetsConnector.jar
C:\ProgramData\Sisense\DataConnectors\MemSql\Sisense.MemSQL.JVM.1.0.16423.20.21.4.10001.0.0\com.sisense.connectors.Memsql.jar
C:\ProgramData\Sisense\DataConnectors\MongoDB\Sisense.MongoDB.JVM.1.0.16423.20.21.4.10003.0.0\com.sisense.connectors.Mongodb.jar
C:\ProgramData\Sisense\DataConnectors\MsSql\Sisense.MsSql.JVM.1.0.16423.10002.0.0\com.sisense.connectors.MsSql.jar
C:\ProgramData\Sisense\DataConnectors\Mysql\Sisense.MySQL.JVM.1.0.16423.20.21.4.10001.0.0\com.sisense.connectors.MySql.jar
C:\ProgramData\Sisense\DataConnectors\Oracle\Sisense.Oracle.JVM.1.0.16423.20.21.4.10001.0.0\com.sisense.connectors.OracleJdbc.jar
C:\ProgramData\Sisense\DataConnectors\Postgresql\Sisense.Postgresql.JVM.1.0.16423.20.21.4.10001.0.0\com.sisense.connectors.Postgresql.jar
C:\ProgramData\Sisense\DataConnectors\Redshift\Sisense.Redshift.JVM.1.0.16423.20.21.4.10001.0.0\com.sisense.connectors.Redshift.jar
C:\ProgramData\Sisense\DataConnectors\Salesforce\Sisense.Salesforce.JVM.1.0.16423.20.21.4.10001.0.0\com.sisense.connectors.Salesforce.jar
C:\ProgramData\Sisense\DataConnectors\Snowflake\Sisense.Snowflake.JVM.1.0.16423.20.21.4.10001.0.0\com.sisense.connectors.Snowflake.jar
2. Sisense has dependencies on Log4J 1 via Zookeeper and Logstash, which is end of life also has a CVE. What steps is Sisense taking to mitigate this vulnerability?
Happy New Year and apologies for missing your comment. The latest Windows patch revision from 12/23 should address scanning for those directories. If you rerun the revised patch and have any issues please let our Support Team know.
For the Log4j 1 dependancies I'll inquire with our team internally for a definitive answer and share here as soon as I can.
