Log4j

Log4j CVE-2021-45105: All we know is WRONG!!

December 24, 2021December 24, 2021Java, Log4j, Tech Blogsapache, java, log4j, technology

Reading Time: 3 minutes Apache security team disclosed a third Log4j2 vulnerability the night between Dec 17 and 18 by the Apache security team. This vulnerability is termed CVE-2021-45105. According to the security advisory, 2.16.0, which fixed the two previous vulnerabilities, is susceptible to a DoS attack caused by a Stack-Overflow in Context Lookups in the configuration file’s layout patterns. What is this CVE about? What can you do Continue Reading

All about Log4j vulnerability

December 22, 2021December 22, 2021Java, Log4jlog4j, Vulnerability

Reading Time: 4 minutes Log4J vulnerability is critical remote code execution (RCE) vulnerability (CVE-2021-44228) in Apache’s Log4j software library, versions 2.0-beta9 to 2.14.1, known as “Log4Shell.” Log4j is very broadly used in a variety of consumer and enterprise services, websites, and applications—as well as in operational technology products—to log security and performance information. An unauthenticated remote actor could exploit this vulnerability to take control of an affected system. On Continue Reading