Predictive Solutions is actively responding to a remote code execution vulnerability detected in the Apache Log4j 2 Java library Log4Shell (or LogJam).

Following the IBM company whose products (IBM SPSS) are part of our company's solutions, we provide you with patches for IBM programs.

Manual for: PS CLEMENTINE PRO 3.0 and IBM SPSS Modeler: 18.2.2

Log4J patch version: 2.17

Operating system: Windows

Fixpack can be downloaded from the link below:

Fixpack for PS CLEMENTINE PRO 3.0 and IBM SPSS Modeler 18.2.2

The system will ask for a username and password, please provide the following authorization details:

User: user
Password: spss

Prerequisites:
----------------------------------------
PS CLEMENTINE PRO 3.0 or IBM SPSS Modeler Client/Server/Batch/Solution Publisher 18.2.2 must be installed prior to applying this interim fix.

Affected Modules:
-----------------
IBM SPSS Modeler Client for MacOS:
[INSTALLDIR]/SPSSModeler.app/Contents/as/lib/log4j*.jar
[INSTALLDIR]/SPSSModeler.app/Contents/ext/bin/pasw.aedata/log4j*.jar

Modeler Client for Windows:
[INSTALLDIR]/as/lib/log4j*.jar
[INSTALLDIR]/ext/bin/pasw.aedata/log4j*.jar

IBM SPSS Modeler Server:
[INSTALLDIR]/as/lib/log4j*.jar
[INSTALLDIR]/ext/bin/pasw.aedata/log4j*.jar

IBM SPSS Modeler Batch:
[INSTALLDIR]/ext/lib/spss.TM4CWebFeed/lib/log4j*.jar
[INSTALLDIR]/ext/lib/spss.TM4CWebFeed/lib/ibm-spss-ta-webfeed-2.0.12.jar
[INSTALLDIR]/ext/lib/spss.TMWBClient/lib/log4j*.jar
[INSTALLDIR]/ext/lib/spss.TM4CTextlinkanalysis/extension.xml
[INSTALLDIR]/ext/lib/spss.TM4CTextmining/extension.xml

IBM SPSS Modeler Solution Publisher:
[INSTALLDIR]/as/lib/log4j*.jar
[INSTALLDIR]/ext/bin/spss.TMWBServer/lib/log4j*.jar
[INSTALLDIR]/ext/bin/spss.TMWBServer/lib/ibm-spss-ta-webfeed-2.0.12.jar
[INSTALLDIR]/ext/bin/spss.TMWBServer/lib/ibm-spss-ta-webfeed-2.0.2.jar
[INSTALLDIR]/ext/bin/pasw.aedata/log4j*.jar
[INSTALLDIR]/ext/lib/spss.TM4CWebFeed/lib/log4j*.jar
[INSTALLDIR]/ext/lib/spss.TM4CWebFeed/lib/ibm-spss-ta-webfeed-2.0.12.jar
[INSTALLDIR]/ext/lib/spss.TMWBClient/lib/log4j*.jar
[INSTALLDIR]/ext/lib/spss.TM4CTextlinkanalysis/extension.xml
[INSTALLDIR]/ext/lib/spss.TM4CTextmining/extension.xml

Installation Instructions:
--------------------------
1) Shut down IBM SPSS Modeler.

2) Replace the files with those in the .zip file:

2.1) Unzip the interim fix into a temporary folder.

2.2) Navigate to the Installation folder where you will find the affected files.

2.3) To make a back up of these files, move them to a temporary folder outside of the [INSTALLDIR] folder.

2.4a) For all the products, copy the extracted files from step 2.1 to replace the corresponding old files.
a. replace all the log4j-api*.jar with log4j-api-2.17.0.jar.
b. replace all the log4j-core*.jar with log4j-core-2.17.0.jar.

2.4b) For IBM SPSS Modeler Batch, copy the extracted files from step 2.1 to replace the corresponding old files.
a. replace ibm-spss-ta-webfeed-2.0.12.jar with the new ones.
b. replace [INSTALLDIR]/ext/lib/spss.TM4CTextlinkanalysis/extension.xml with the new ones.
c. replace [INSTALLDIR]/ext/lib/spss.TM4CTextmining/extension.xml with the new ones.

2.4c) For IBM SPSS Modeler Solution Publisher, move the extracted files from step 2.1 to replace the corresponding old files.
a. replace all ibm-spss-ta-webfeed-2.0.12.jar with the new ones.
b. replace ibm-spss-ta-webfeed-2.0.2.jar with the new ones.
b. replace [INSTALLDIR]/ext/lib/spss.TM4CTextlinkanalysis/extension.xml with the new ones.
c. replace [INSTALLDIR]/ext/lib/spss.TM4CTextmining/extension.xml with the new ones.

3) Restart IBM SPSS Modeler.

Un-install Instructions:
--------------------------
1) Shut down IBM SPSS Modeler.

2) Replace the following files with those in the backup folder:
2.1) Navigate to the Installation folder and delete following files:
log4j-api-2.17.0.jar and log4j-core-2.17.0.jar

2.2) Copy files from the back up folder in step 2.3 of the installation instructions to the installation related folder.

3) Restart IBM SPSS Modeler.