Questions tagged [log4j]
The log4j tag has no summary.
31 questions
0
votes
2
answers
490
views
apache remove wget for better security
Im no expert at IT or apache but I have used linux for years.
Ive done my best to harden/secure my server online which I use for a mobile app which
needs to serve up its content etc.
Ive noticed some ...
- 203
0
votes
1
answer
32k
views
How to replace/update Apache Log4j 1.2.x with 2.17?
My vulnerability scanner recently flagged an unsupported installation of Apache Log4j in a version of MS SQL we just recently deployed (SQL 2019). It causes two high-priority findings that I must get ...
- 371
0
votes
0
answers
2k
views
How to detect log4J on windows server 2016 Datacenter machine
So I recently got a mail about updating to the latest security update to the Apache software installed on my server (vulnerability (CVE-2021-44228 & CVE-2021-45046) related to Apache Log4j), but ...
4
votes
1
answer
3k
views
Kafka stores log4j logs in directory literally called ${kafka.logs.dir}
I installed a preview version of Kafka 3.0 with log4j2 support (http://home.apache.org/~dongjin/post/apache-kafka-log4j2-support/) on a RHEL 8 server. Kafka and Zookeeper are running successfully as ...
0
votes
0
answers
44
views
locate all nested war/jar files inside jboss/wildfly - log4j [duplicate]
I want to detect all nested wars and jars containing the log4j library. I have jboss/wildfly services. I started to find out with 'locate | grep', but it shows me only tmp directories, not exactly war/...
- 1
1
vote
1
answer
626
views
Log4j - Older app on Windows server using JRE 1.8.0.x - is it impacted?
I can't find any info on whether specific versions of JRE are impacted? The app on my Windows Server 2012 uses JRE 1.8.0.x (1.8.0_91) but not sure if if uses Log4j logging service. Can anyone help ...
- 11
2
votes
2
answers
4k
views
How to scan for log4j on Windows Server
I have a Windows Server 2012 R2 machine. What is the best way to search for log4j. Is it enough with a simple file search or can these files be used from inside a container. I have done a file search ...
- 123
0
votes
1
answer
207
views
List of services affected by the Apache Log4jshell Vulnerability
Does there yet exist a list of software that is potentially affected by the Apache Log4jshell vulnerability (CVE-2021-44228) that was announced last Friday?
As someone managing a number of servers ...
- 133
2
votes
1
answer
5k
views
Is nginx affected by the log4j 0 day exploit found recently?
Trying to learn more about the recently discovered 0 day exploit
This is a list of affected software I found -> https://github.com/NCSC-NL/log4shell/tree/main/software
It only says nginx in a note ...
- 145
0
votes
1
answer
327
views
PowerDNS & Log4j
I'm running a PowerDNS on Linux.
It looks like PowerDNS is vulnerable to the new log4j-exploit. Is there any way I can disable the Log4j?
From my research it looks like you can change the logging ...
- 87
1
vote
1
answer
667
views
Use kong reverse proxy to filter log4j exploits
I am using a kong reverse proxy to proxy every HTTP request for my web servers. I would like to mitigate the current log4j problem ("log4shell") by finding and replace the critical attacers' ...
- 161
69
votes
11
answers
228k
views
How do I check if Log4j is installed on my server?
I have read about security vulnerabilities related to Log4j.
How do I check if Log4j is installed on my server?
My specific servers use Ubuntu 18.04.6 LTS.
I have installed many third-party packages ...
- 948
0
votes
0
answers
239
views
Unable to log machine's fqdn instead of "localhost" from java program
I am currently using log4j library in java to post logs onto syslog but those logs always show "localhost" for hostname instead of the device's actual name. This only happens when i send log from my ...
0
votes
1
answer
417
views
Appending new lines in Tomcat Catalina log rotate
Application running on Tomcat is using log4j for some unknown reason is appending (randomly) new log lines somewhere in the middle of the log file
log4j.properites looks like:
log4j.rootLogger=INFO, ...
- 411
2
votes
0
answers
2k
views
Tomcat 8.5 Log To Syslog
I have found a tutorial for logging from tomcat to syslog using log4j:
https://www.badllama.com/content/tomcat-7-logging-syslog-log4j
Sadly this doesn't work anymore in tomcat 8.5. As stated in the ...
- 121