Log4j v1 found in this folder

Usage and Config Platform
1

Hi, VA scan has picked up Log4j v1

Path : C:\Program Files (x86)\BigFix Enterprise\BES Client\LMT\VMMAN\lib\log4j-1.2.16.jar
Installed version : 1.2.16

Tried deleting this file but prompts out that the java is in use. Could you pls advise on how to mitigate this?

Thank you!

2

That’s part of the BigFix Inventory / ILMT Virtual Machine Manager tool. Suggest upgrading to the latest version as described at https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0095486