CVE-2021-44228 - Revision history

IVSWikiBlue at 19:08, 14 March 2025

2025-03-14T19:08:38Z

IVSWikiBlue at 13:51, 29 September 2022

2022-09-29T13:51:44Z

IVSWikiBlue at 13:51, 29 September 2022

2022-09-29T13:51:27Z

IVSWikiBlue at 21:01, 11 May 2022

2022-05-11T21:01:53Z

IVSWikiBlue at 14:40, 21 December 2021

2021-12-21T14:40:28Z

IVSWikiBlue: /* Remediation */

2021-12-21T14:33:26Z

‎Remediation

IVSWikiBlue at 14:33, 21 December 2021

2021-12-21T14:33:09Z

IVSWikiBlue: /* Vulnerability */

2021-12-21T14:32:33Z

‎Vulnerability

IVSWikiBlue at 14:23, 21 December 2021

2021-12-21T14:23:41Z

IVSWikiBlue at 14:21, 21 December 2021

2021-12-21T14:21:35Z

← Older revision		Revision as of 19:08, 14 March 2025
Line 9:		Line 9:
	<div class="section">		<div class="section">
	This vulnerability is only present VALT servers running version '''5.5 - 5.5.8'''. Older VALT servers are unaffected by the vulnerability.		This vulnerability is only present VALT servers running version '''5.5 - 5.5.8'''. Older VALT servers are unaffected by the vulnerability.
−
−	~~You can [[VALT_Administrator_Guide_5.5#General \| check your VALT version]] on the General page under the Admin section.~~

← Older revision		Revision as of 13:51, 29 September 2022
Line 10:		Line 10:
	This vulnerability is only present VALT servers running version '''5.5 - 5.5.8'''. Older VALT servers are unaffected by the vulnerability.		This vulnerability is only present VALT servers running version '''5.5 - 5.5.8'''. Older VALT servers are unaffected by the vulnerability.

−	You can [[~~https://ipivs.info/wiki/index.php/~~VALT_Administrator_Guide_5.5#General \| check your VALT version]] on the General page under the Admin section.	+	You can [[VALT_Administrator_Guide_5.5#General \| check your VALT version]] on the General page under the Admin section.

@@ Line 1: / Line 1: @@
 =Vulnerability=
 https://nvd.nist.gov/vuln/detail/CVE-2021-44228
 '''Based on the information available regarding the vulnerability and how the affected packages are utilized in VALT, we do not believe at this time that the vulnerability can be exploited on any VALT servers. Additionally most customers are operating VALT isolated within their own network, so the risk is low that a malicious party could connect to a VALT server to attempt to exploit the vulnerability. However in effort to ensure your security, we have provided the information below on how to address this vulnerability.'''
 =Affected Versions=
 This vulnerability is only present VALT servers running version '''5.5 - 5.5.8'''. Older VALT servers are unaffected by the vulnerability.
-You can check your VALT version on the General page under the Admin section.
+You can [[https://ipivs.info/wiki/index.php/VALT_Administrator_Guide_5.5#General | check your VALT version]] on the General page under the Admin section.
+You can read the VALT release notes [[Release_Notes | here]]
-You can read the VALT release notes [[https://ipivs.info/wiki/index.php/Release_Notes here]]
+</div>
 =Remediation=
 Intelligent Video Solutions recommends that you updated your VALT server to the latest release. The latest release includes a fix to this vulnerability. You can book an update with an IVS support engineer at http://ipivs.com/book.
@@ Line 33: / Line 36: @@
 #: {{img | file = log4j3.png}}
 # The vulnerability has now been patched.

@@ Line 25: / Line 25: @@
 # Log into the Valt appliance via SSH or the terminal
 # Type in the following, followed by pressing Enter: <code>wget https://ivs.box.com/shared/static/w78x8elhkxgxmqgge1w4az1npc7sw6za.gz -O log4j.tar.gz</code>
-#: [[File:log4j1.png]]
+#: {{img | file = log4j1.png}}
 # Type in the following, followed by pressing Enter: <code>tar -xvf log4j.tar.gz</code>
-#: [[File:log4j2.png]]
+#: {{img | file = log4j2.png}}
 # Type in the following, followed by pressing Enter: <code>cd log4j</code>
 # Type in the following, followed by pressing Enter: <code>sudo ./log4j.sh</code>
 # Enter the password if prompted.
-#: [[File:log4j3.png]]
+#: {{img | file = log4j3.png}}
 # The vulnerability has now been patched.

← Older revision		Revision as of 14:40, 21 December 2021
Line 10:		Line 10:

	https://ipivs.info/wiki/index.php/VALT_Administrator_Guide_5.5#General		https://ipivs.info/wiki/index.php/VALT_Administrator_Guide_5.5#General
		+
		+
		+	You can read the VALT release notes [[https://ipivs.info/wiki/index.php/Release_Notes here]]

	=Remediation=		=Remediation=

@@ Line 14: / Line 14: @@
 Intelligent Video Solutions recommends that you updated your VALT server to the latest release. The latest release includes a fix to this vulnerability. You can book an update with an IVS support engineer at http://ipivs.com/book.
-If you are unable to update your system, you can follow the steps below to address this specific vulnerability. This remediation has been updated to address both CVE-2021-44228 and [[CVE-2021-45046]].
+If you are unable to update your system, you can follow the steps below to address this specific vulnerability. This remediation has been updated to address both '''CVE-2021-44228''' and '''[[CVE-2021-45046]]'''.
 '''WARNING: The steps below outline using an automated script to update the VALT appliance. It is designed to be used on standard Valt appliances.'''

← Older revision		Revision as of 14:32, 21 December 2021
Line 2:		Line 2:
	https://nvd.nist.gov/vuln/detail/CVE-2021-44228		https://nvd.nist.gov/vuln/detail/CVE-2021-44228

−	~~https://nvd.nist.gov/vuln/detail/CVE-2021-45046~~

	'''Based on the information available regarding the vulnerability and how the affected packages are utilized in VALT, we do not believe at this time that the vulnerability can be exploited on any VALT servers. Additionally most customers are operating VALT isolated within their own network, so the risk is low that a malicious party could connect to a VALT server to attempt to exploit the vulnerability. However in effort to ensure your security, we have provided the information below on how to address this vulnerability.'''		'''Based on the information available regarding the vulnerability and how the affected packages are utilized in VALT, we do not believe at this time that the vulnerability can be exploited on any VALT servers. Additionally most customers are operating VALT isolated within their own network, so the risk is low that a malicious party could connect to a VALT server to attempt to exploit the vulnerability. However in effort to ensure your security, we have provided the information below on how to address this vulnerability.'''