Log4j CVE-2021-44228, CVE-2021-45046 Summary Page

[JasonWalker]

Poll on which workarounds, if any, you’d like to see us develop:

Log4j CVE-2021-44228 Detection and Mitigation

Poll on Mitigation As we are waiting for vendors to update their individual applications, the cyber community has coalesced on a couple of techniques that may mitigate the problem. Both of these involve modifying the Log4J JAR file. Both of these could have unintended consequences on the products using Log4J and thus come with an element of risk. Method 1 would be to replace the JAR file entirely, with the latest log4j-2.16.0.jar. To avoid updating whatever application was using log4j, we wo…