Log4J Vulnerability located in Atlassian/Crowd

Question

I am getting prompts that my version of Atalassian Crowd has vulnerable Log4J files in it - how can we remedy?

Ernest Dudley · Answer

I'm getting flagged through Nessus. I downloaded the latest crowd version (5.0.0) and Nessus is flagging the Log4j package (1.2.17) as being an unsupported version of Log4j. Just an FYI, see: https://confluence.atlassian.com/kb/faq-for-cve-2021-44228-1103069406.html

Sloan N_ B_ · Answer

What does the link say? What do you mean by Azure/Windows Defender security?

Mariner IT · Answer

That link does not seem to work for me.