applies to us ONLY if this is true?
"According to Apache’s advisory, all Apache Log4j (version 2.x) versions up to 2.14.1 are vulnerable if message lookup substitution was enabled."
1) Himanshu said we are Version 1.2. So we are not even using an Affected version?
2) Do we know if this even applies to our aware installs? It also says this:
"According to a translated technical blog post, JDK versions greater than 6u211, 7u201, 8u191, and 11.0.1 are not affected by the LDAP attack vector."
So easy instructions posted here should tell us how to easily check which JDK is installed. It may not affect us.
