Log4j CVE-2021-44228, CVE-2021-45046 -- Custom Web Report

I have created a custom web report for easier data analysis of the Log4j vulnerabilities found using a Logpresso/Log4j scan. This report is based on the results from the “log4j2-scan results” analysis (ID 601 in the “BES Inventory and License” site). The analysis has to be activated for the report to work.

Report download link: HERE.

Note: This content is provided as-is and without any warranties.

Web Report screenshot:

6 Likes

BigFix has updated the BES Inventory and License site with this report (site version 196)
This site update also includes the update to the 2.9.2 scanner for Log4j

Tasks updated:

  • 602 Run: log4j2-scan v2.9.2 - Universal JAR - Download JRE - SCAN only
  • 604 Run: log4j2-scan v2.9.2 - Universal JAR - Download JRE - UNDO REMEDIATION
  • 603 Run: log4j2-scan v2.9.2 - Universal JAR - Download JRE - WITH REMEDIATION
2 Likes