0

I was asked to uninstall IntelliJ IDEA from my machine because of the log4j vulnerability. The security team is looking for the log4j version installed in my machine, which from the downloaded lib, I am not able to figure out. Can someone tell me how I know about the log4j version from IntelliJ IDEA Community edition 2021.1.1.?

Location of log 4j:

/Lib folder inside the IntelliJ idea location.

enter image description here

LazyOne
  • 158,824
  • 45
  • 388
  • 391
QualityMatters
  • 895
  • 11
  • 31
  • See the official comments on this matter: https://youtrack.jetbrains.com/issue/IDEA-284795 (at very least for the latest versions of JetBrains products, which is 2021.3 for most of them / yours is older so makes sense to upgrade) – LazyOne Dec 14 '21 at 10:27

1 Answers1

1

Open the jar in a ZIP viewer / File Manager / Explorer and view the META-INF/MANIFEST.MF file.

There should be various fields which tell you the product version (it varies), one I opened has this field:

  Log4jReleaseVersion: A.B.C
DuncG
  • 12,137
  • 2
  • 21
  • 33