CVE-2021-45046 - Revision history

IVSWikiBlue: /* Remediation */

2021-12-21T14:40:50Z

‎Remediation

IVSWikiBlue: /* Affected Versions */

2021-12-21T14:40:15Z

‎Affected Versions

IVSWikiBlue at 14:40, 21 December 2021

2021-12-21T14:40:06Z

IVSWikiBlue at 14:33, 21 December 2021

2021-12-21T14:33:43Z

IVSWikiBlue: /* Vulnerability */

2021-12-21T14:32:46Z

‎Vulnerability

IVSWikiBlue: Created page with "=Vulnerability= https://nvd.nist.gov/vuln/detail/CVE-2021-44228 https://nvd.nist.gov/vuln/detail/CVE-2021-45046 '''Based on the information available regarding the vulnerabi..."

2021-12-21T14:24:44Z

Created page with "=Vulnerability= https://nvd.nist.gov/vuln/detail/CVE-2021-44228 https://nvd.nist.gov/vuln/detail/CVE-2021-45046 '''Based on the information available regarding the vulnerabi..."

New page

=Vulnerability=
https://nvd.nist.gov/vuln/detail/CVE-2021-44228

https://nvd.nist.gov/vuln/detail/CVE-2021-45046

'''Based on the information available regarding the vulnerability and how the affected packages are utilized in VALT, we do not believe at this time that the vulnerability can be exploited on any VALT servers. Additionally most customers are operating VALT isolated within their own network, so the risk is low that a malicious party could connect to a VALT server to attempt to exploit the vulnerability. However in effort to ensure your security, we have provided the information below on how to address this vulnerability.'''

=Affected Versions=
This vulnerability is only present VALT servers running version '''5.5 - 5.5.9'''. Older VALT servers are unaffected by the vulnerability.

You can check your VALT version on the General page under the Admin section.

https://ipivs.info/wiki/index.php/VALT_Administrator_Guide_5.5#General

=Remediation=
Intelligent Video Solutions recommends that you updated your VALT server to the latest release. The latest release includes a fix to this vulnerability. You can book an update with an IVS support engineer at http://ipivs.com/book.

If you are unable to update your system, you can follow the steps below to address this specific vulnerability. This remediation has been updated to address both [[CVE-2021-44228]] and CVE-2021-45046.

'''WARNING: The steps below outline using an automated script to update the VALT appliance. It is designed to be used on standard Valt appliances.'''

'''WARNING: This applies to VALT 5.5 - 5.5.9. DO NOT PERFORM THESE STEPS ON ANY OTHER VERSION!!

# Log into the Valt appliance via SSH or the terminal
# Type in the following, followed by pressing Enter: <code>wget https://ivs.box.com/shared/static/w78x8elhkxgxmqgge1w4az1npc7sw6za.gz -O log4j.tar.gz</code>
#: [[File:log4j1.png]]
# Type in the following, followed by pressing Enter: <code>tar -xvf log4j.tar.gz</code>
#: [[File:log4j2.png]]
# Type in the following, followed by pressing Enter: <code>cd log4j</code>
# Type in the following, followed by pressing Enter: <code>sudo ./log4j.sh</code>
# Enter the password if prompted.
#: [[File:log4j3.png]]
# The vulnerability has now been patched.

← Older revision		Revision as of 14:40, 21 December 2021
Line 13:		Line 13:


−	You can read the VALT release notes [[https://ipivs.info/wiki/index.php/Release_Notes here]]	+	You can read the VALT release notes [https://ipivs.info/wiki/index.php/Release_Notes here]

	=Remediation=		=Remediation=

← Older revision		Revision as of 14:40, 21 December 2021
Line 11:		Line 11:

	https://ipivs.info/wiki/index.php/VALT_Administrator_Guide_5.5#General		https://ipivs.info/wiki/index.php/VALT_Administrator_Guide_5.5#General
		+
		+
		+	You can read the VALT release notes [[https://ipivs.info/wiki/index.php/Release_Notes here]]

	=Remediation=		=Remediation=

← Older revision		Revision as of 14:32, 21 December 2021
Line 1:		Line 1:
	=Vulnerability=		=Vulnerability=
−	~~https://nvd.nist.gov/vuln/detail/CVE-2021-44228~~

	https://nvd.nist.gov/vuln/detail/CVE-2021-45046		https://nvd.nist.gov/vuln/detail/CVE-2021-45046

@@ Line 22: / Line 22: @@
 '''WARNING: The steps below outline using an automated script to update the VALT appliance. It is designed to be used on standard Valt appliances.'''
-'''WARNING: This applies to VALT 5.5 - 5.5.9. DO NOT PERFORM THESE STEPS ON ANY OTHER VERSION!!
+'''WARNING: This applies to VALT 5.5 - 5.5.8. DO NOT PERFORM THESE STEPS ON ANY OTHER VERSION!!
 # Log into the Valt appliance via SSH or the terminal

@@ Line 15: / Line 15: @@
 Intelligent Video Solutions recommends that you updated your VALT server to the latest release. The latest release includes a fix to this vulnerability. You can book an update with an IVS support engineer at http://ipivs.com/book.
-If you are unable to update your system, you can follow the steps below to address this specific vulnerability. This remediation has been updated to address both [[CVE-2021-44228]] and CVE-2021-45046.
+If you are unable to update your system, you can follow the steps below to address this specific vulnerability. This remediation has been updated to address both '''[[CVE-2021-44228]]''' and '''CVE-2021-45046'''.
 '''WARNING: The steps below outline using an automated script to update the VALT appliance. It is designed to be used on standard Valt appliances.'''