IJ42309: THE FILE LOG4J-1.2.17.JAR UNDER <MAXROOT>\REPORTS\COGNOS\C11

APAR status

• Closed as program error.

Error description

• There is a file log4j-1.2.17.jar under
  <MaxRoot>\reports\cognos\c11\sdk and
  <MaxRoot>\reports\cognos\c11\src\lib.
  
  This file contains a vulnerabulity and is flagged by security
  software.
  
  
  ACTION PLAN:
  These 2 files need to be either updated or removed.
  
  
  PRODUCT VERSION:
  IBM Maximo Asset Management  7.6.1.2
  

Local fix

• The user can manually delete these to get around this issue.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * MAXIMO                                                       *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Old Cognos folders and files -including log4j jar was not    *
  * being purged from customers environments after upgrade.      *
  ****************************************************************
  

Problem conclusion

• _The fix for this APAR is contained in the following maintenance
  package: release\fix pack for Release 8.5 Product_
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  MAXIMO REPORTIN

• Fixed component ID

  TIVOREPTS

Applicable component levels