Searching our Adagio server, we find the vulnerable LOG4J java files on the server, apparently installed by SAP Crystal Reports. What can we do to mitigate the risks inherent with this zero day exploitable code. Will we break anything by simply removing all the directories with the LOG4J modules?

What is Softrak doing about this zero day exploit? Have any statements been made, and how to mitigate the risk on Adagio products?

Tom:

We have numerous Log4j on our server, not just Crystal reports.

As I understand it, in order to exploit the vulnerability a hacker would need to access your server from the internet using either Web services or Java. Make sure that anything someone can run from your website to access your server is patched.

This doesn't apply to Microsoft's RDP.