log4j security issue

aaf-cadi-aaf comes with a 1.2.17 log4j flagged by nexusiq as a security issue

Issue-ID: CLAMP-789

Signed-off-by: JulienBe <jb379x@att.com>
Change-Id: I99cd29941c12c6d868db90c4f46395216afc57b3

diff --git a/pom.xml b/pom.xml
index 633109b..c82ddc9 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -428,6 +428,10 @@
                                        <groupId>javax.servlet</groupId>
                                        <artifactId>servlet-api</artifactId>
                                </exclusion>
+                               <exclusion>
+                                       <groupId>log4j</groupId>
+                                       <artifactId>log4j</artifactId>
+                               </exclusion>
                        </exclusions>
                </dependency>
                <dependency>