Skip to content

How should a known critical CVE affecting a component IFS uses (like a Log4j-class vulnerability) actually be addressed?

Answer

Follow the specific official IFS advisory and its named solution/patch exactly, rather than a partial workaround — apply the documented fix identified for that CVE, then follow its stated verification steps precisely; treat incidental cleanup steps (like clearing temp folders) as part of the documented procedure, not as the remediation itself, and don't assume a critical vulnerability is resolved without confirming against the official advisory.

← Browse Developer Studio, deployment, and upgrades questions