ZOOKEEPER-3817: suppress log4j SmtpAppender related CVE-2020-9488

Author: Mate Szalay-Beko <symat@apache.org>

Reviewers: Enrico Olivelli <eolivelli@apache.org>

Closes #1346 from symat/ZOOKEEPER-3817

(cherry picked from commit f6b54a6cd227ac37f28803f45d7287c7fd3a8142)
Signed-off-by: Enrico Olivelli <eolivelli@apache.org>

owaspSuppressions.xml

@@ -46,4 +46,9 @@
            ZOOKEEPER-3677 -->
       <cve>CVE-2019-17571</cve>
    </suppress>
+   <suppress>
+      <!-- it only affects the log4j SmtpAppender users. As Log4J 1.2 is EOL now, we can't fix this unless we
+           upgrade to log4j 2. See ZOOKEEPER-3817 -->
+      <cve>CVE-2020-9488</cve>
+   </suppress>
 </suppressions>