log4j vulnerability

Question

Microsoft,
We are currently using MS Orchestrator 2012 and are wondering if this utilizes log4j

Designer: 7.1.3022.0

Orchestrator Management Servers:
SOMPICMVVAW01: 7.1.3022.0

Libraries:
Compression-6-4109999.op4caw: 7.1.3022.0
Compression-6-4109999.op4saw: 7.1.3022.0
Database-14-40801.op4caw: 7.1.3022.0
Database-14-40801.Op4saw: 7.1.3022.0
DataMapper-689-5000001.op4caw: 7.1.3022.0
DataMapper-689-5000001.op4saw: 7.1.3022.0
DateTime-1-5000001.op4saw: 7.1.3022.0
Email-2-40803.op4saw: 7.1.3022.0
Email-2-4109999.op4caw: 7.1.3022.0
Encryption-628-5000001.op4caw: 7.1.3022.0
Encryption-628-5000001.op4saw: 7.1.3022.0
EncryptionDomainLibResources.dll: 7.1.3022.0
FileAndFolderFOCommon.dll: 7.1.3022.0
FileList-38-40801.op4cbw: 7.1.3022.0
FileManagement-4-40802.op4caw: 7.1.3022.0
FileManagement-4-40802.op4saw: 7.1.3022.0
FileManagementClientExtension.dll: 7.1.3022.0
FileManagementDomain.dll: 7.1.3022.0
FileManagementResource.dll: 7.1.3022.0
FileManagementServerExtension.dll: 7.1.3022.0
FileMonitorClientExtension.dll: 7.1.3022.0
FileMonitorDomain.dll: 7.1.3022.0
FileMonitorServerExtension.dll: 7.1.3022.0
FolderMonitorClientExtension.dll: 7.1.3022.0
FolderMonitorDomain.dll: 7.1.3022.0
FolderMonitorServerExtension.dll: 7.1.3022.0
FormatDateTimeClientExtension.dll: 7.1.3022.0
FormatDateTimeDomainLibResources.dll: 7.1.3022.0
FormatDateTimeServerExtension.dll: 7.1.3022.0
Internet-13-40801.op4caw: 7.1.3022.0
Internet-13-4109999.op4saw: 7.1.3022.0
ManageTextFileClientExtension.dll: 7.1.3022.0
ManageTextFileDomain.dll: 7.1.3022.0
ManageTextFileServerExtension.dll: 7.1.3022.0
Microsoft.SystemCenter.Orchestrator.Integration.Toolkit.IP.ClientExtension.dll: 7.0.359.0
Microsoft.SystemCenter.Orchestrator.Integration.Toolkit.IP.ServerExtension.dll: 7.0.359.0
Microsoft.SystemCenter.Orchestrator.Integration.Toolkit.Wizard.Images.dll: 7.0.359.0
MpCore4LibResources.dll: 7.1.3022.0
MpCoreLibResources.dll: 7.1.3022.0
NetBrowser-40-40801.op4cbw: 7.1.3022.0
NetUseObjectsClientExtension.dll: 7.1.3022.0
NetUseObjectsServerExtension.dll: 7.1.3022.0
Network-24-407.op4caw: 7.1.3022.0
Network-24-40801.op4saw: 7.1.3022.0
ObjectResources.dll: 7.1.3022.0
OpCoreLibResources.dll: 7.1.3022.0
OpToolsLibResources.dll: 7.1.3022.0
ProcessBrowser-69-40801.op4cbw: 7.1.3022.0
QueryXmlClientExtension.dll: 7.1.3022.0
QueryXmlServerExtension.dll: 7.1.3022.0
RandomStringClientExtension.dll: 7.1.3022.0
RandomStringDomainLibResources.dll: 7.1.3022.0
RandomStringServerExtension.dll: 7.1.3022.0
RASPhoneBook-56-40801.op4sbw: 7.1.3022.0
RASPhoneBrowser-56-40801.op4cbw: 7.1.3022.0
RunScriptClientExtension.dll: 7.1.3022.0
RunScriptDomain.dll: 7.1.3022.0
RunScriptServerExtension.dll: 7.1.3022.0
Schedule-1-40801.op4caw: 7.1.3022.0
SnmpClient-119-4109999.op4caw: 7.1.3022.0
SNMPClientExtension.dll: 7.1.3022.0
SnmpDomainLibResources.dll: 7.1.3022.0
SnmpService-119-4109999.op4saw: 7.1.3022.0
SSHClient-117-4109999.op4caw: 7.1.3022.0
SSHService-117-4109999.op4saw: 7.1.3022.0
StandardObjects.dll: 7.1.3022.0
SystemCenter.IntegrationPack.ExchangeAdmin.Images.dll: 7.1.3007.0
SystemCenter.IntegrationPack.ExchangeUser.Images.dll: 7.1.3005.0
SystemUtilities-16-40801.op4caw: 7.1.3022.0
SystemUtilities-16-40802.op4saw: 7.1.3022.0
TextFile-15-40801.op4caw: 7.1.3022.0
TextFile-15-40801.op4saw: 7.1.3022.0
WebServiceChannelLibResources.dll: 7.1.3022.0
WebServicesBase.dll: 7.1.3022.0
WebServicesClientExtension.dll: 7.1.3022.0
WebServicesProxy.dll: 7.1.3022.0
WebServicesServerExtension.dll: 7.1.3022.0
WindowsUtilities-21-40801.op4caw: 7.1.3022.0
WindowsUtilities-21-40801.op4saw: 7.1.3022.0
Wmi-8-40802.op4caw: 7.1.3022.0
Wmi-8-40809.op4saw: 7.1.3022.0
XsltTransformClientExtension.dll: 7.1.3022.0
XsltTransformServerExtension.dll: 7.1.3022.0

Answer 1

Hi @81903399 ,

No, System Center Orchestrator 2012 and above does not have log4j components. The Orchestrator WebServices are based on IIS, and not on Apache.

Regards,
Stefan