Concur Travel & CVE-2021-44228 aka log4j

[ggouldon]

Are Concur Travel users possibly impacted by CVE-2021-44228, aka log4j ?

background info:
NVD - CVE-2021-44228 (nist.gov)

US warns Log4j flaw puts hundreds of millions of devices at risk | ZDNet

SAP has issued a bulletin about SAP SuccessFactors but we have heard nothing about Concur Travel.
Can you tell me where I can get an update?

thanks

Grant Gouldon
Kelly-Moore Paints
ggouldon@kellymoore.com

[NTS · Accepted solution]

Hi @ggouldon 

As I mentioned in Expense Forum, there are many ways to get info about this issue and all related SAP products.

For SAP Concur, you can get this info in:

- SAP Support portal: https://support.sap.com/en/index.html

- SAP CONCUR Support portal: https://concur.secure.force.com/CteSupport/

If you have access to the SAP Support Portal check this PDF updated in a daily basis: https://support.sap.com/content/dam/support/en_us/library/ssp/my-support/trust-center/sap-tc-01-5025...

(Note: I must say that this PDF doesn't include many many SAP products yet, but it's an ok start point)

Concur Patch Pending

Concur Patch Application

Hope it helps.

Regards

[ggouldon]

Very helpful

Thank you!