ABS Nautical Systems Security Notice: Steps to Resolve CVE-2021-44228

ABS Nautical Systems Customers: Please reference our security notice with steps to resolve CVE-2021-44228 in reference to the Apache Log4J Vulnerability.

Step 1 – Identify the vulnerable files

• Navigate to the NS installation folder using Windows File Explorer
• Search for log4j-core-2.*.jar – you will see a list as shown in the below example
• Leave this window open

Step 2 – Stop related services

If any files are located, please stop the services related. The installation folder name can identify the service name; for the above three you will need to stop NS-MOBILE-nnnn, NS-WEB-nnnn & NS-SERVICE-nnnn

• Navigate to the Services
• Stop the identified NS Services

Step 3 – Backup one copy of the affected jar

• Open another windows files explorer
• Copy one file from the search list and copy it under a new location, example: C:\NS\CVE-2021-44228\Original

Step 4 – Fix the jar to resolve the issue

• Make a copy of the file from C:\NS\CVE-2021-44228\Original\log4j-core-2.4.1.jar to C:\NS\CVE-2021-44228\Fixed\log4j-core-2.4.1.jar
• If you have 7-zip, right-click on the file copied under Fixed and select open archive

• Navigate to the path org\apache\logging\log4j\core\lookup\

• Delete the file: JndiLookup.class
• Close the window, now the fix is ready

Step 5 – Replace the affected files

• Go back the search window
• Right click on the file log4j-core-2.4.1 and select “Open File Location”
• Copy the file from C:\NS\CVE-2021-44228\Fixed\log4j-core-2.4.1.jar and overwrite the file
• Do this for all files found in the search

Step 6 – Restart the services that were stopped in Step 2

---

 

About ABS Nautical Systems

ABS Nautical Systems is recognized as the leader in maritime fleet management software, supporting digital transformation across marine assets and providing powerful business intelligence solutions for a complex world. Our reliability-based software and compliance management solutions have helped mariners solve real-world operational challenges for over 30 years. Today, our advanced software platform NS Enterprise supports faster, more accurate decision-making to help the marine and offshore industries improve efficiency, enhance safety and drive performance. Learn more about ABS Nautical Systems software solutions and services.