Log4j warning after installing COMSOL 6.3

问题描述

After installing COMSOL 6.3 my security scan gives a log4j warning pointing to

C:\Program Files\COMSOL\COMSOL63\Multiphysics\license\win64\lmadmin\examples\alerter\lib\log4j-core-2.17.0.jar

解决方法

COMSOL Version 6.3 is not vulnerable itself. The package indicated in the warning belongs to a third-party tool,lmadmin, which is an alternate tool for license handling that is not used by default. According to thelmadmindevelopers this license handling tool should not be exposed to this vulnerability. Please seeCVE-2021-44832 Log4j vulnerability impact on FlexNet Publisherfor more information.

If you are not usinglmadminas the license handling tool on your computer, you can safely remove the entirelmadmindirectory. If you are usinglmadminon your computer, you can remove thelmadmin\examplesdirectory instead. However, if you are using the alerter functionality inlmadmin, you need to keep the directory and patch the log4j files according to the workaround explained inVulnerability: CVE-2021-44832 Log4j vulnerability impact on FlexNet Publisher.

按类别浏览

错误消息 (65)
导入 (10)
几何 (14)
物理场 (10)
求解器 (36)
安装 (41)
网格 (14)
通用 (36)
结构力学 (2)
流体动力学 (1)
后处理 (4)
导出 (1)
绘图 (1)
产品信息 (6)
多物理场 (1)
用户模型 (1)
电磁学 (1)