Log4j ( Security – Vulnerability – Apache )

Log4j – Security Vulnerability – Detection Tool – WhiteSource – Windows Binary

Daniel Adeniji Apache Foundation ( Security - Vulnerability ), Jack Wallen ( Technical Writer ), log4j, Log4j ( Security - Vulnerability - Apache ), Log4jShell ( Security - Vulnerability - Apache - Log4j ), PowerShell ( Microsoft ), Security Vulnerability ( Security ), Technical, TechRepublic, WhiteSource

Background Let us quickly try out another of the freely available tools for detecting the Log4J security vulnerabilities.   Lineage Log4j – Security Vulnerability – Detection Tools Link Log4j – Security Vulnerability – Detection Tool – CERT ( Community Emergency Response Team ) – PowerShell Script Link WhiteSource Our Story Here is a beautiful story: … Continue reading Log4j – Security Vulnerability – Detection Tool – WhiteSource – Windows Binary

Log4j – Security Vulnerability – Detection Tool – CERT ( Community Emergency Response Team ) – PowerShell Script

Daniel Adeniji Apache Foundation ( Security - Vulnerability ), Carnegie Mellon University ( University ), CERT ( Community Emergency Response Team ), log4j, Log4j ( Security - Vulnerability - Apache ), Log4jShell ( Security - Vulnerability - Apache - Log4j ), PowerShell ( Microsoft ), Security Vulnerability ( Security ), Software Engineering Institute ( SEI ) - Carnegie Mellon University ( University ), Technical

Background Library ( Jar ) Files Patched / Apache / v2.17.1 Link Package File Type File Name Link Apache Log4j 2 binary ( tar.gz ) apache-log4j-2.17.1-bin.tar.gz Link Apache Log4j 2 binary ( zip ) apache-log4j-2.17.1-bin.zip Link Extract Jar File Usage Purpose JAR File Name Syntax JAR File Name ( Version Specific ) Log4J API File Provides … Continue reading Log4j – Security Vulnerability – Detection Tool – CERT ( Community Emergency Response Team ) – PowerShell Script

Log4j – Security Vulnerability – Detection Tools

Daniel Adeniji Apache Foundation ( Security - Vulnerability ), CERT ( Community Emergency Response Team ), Check Point, David Strom ( Software ), Infoworld, JFrog, log4j, Log4j ( Security - Vulnerability - Apache ), Log4jShell ( Security - Vulnerability - Apache - Log4j ), Mayank Deshmukh ( Software Engineer ), PortSwigger, Qualys, Security Vulnerability ( Security ), Technical, WhiteSource

Background Thankfully, just about everyone and their mama have a tool for detecting software stacks that are susceptible to Apache Log4J's Log4Shell Security Vulnerability.   Tools David Strom, InfoWorld Here is a list pulled together by David Strom @ Infoworld Link Company Product Platform Product Link Explanation Qualys Qualys Web Application Scanning Cloud Link Link … Continue reading Log4j – Security Vulnerability – Detection Tools

Apache/Log4j – Log4Shell:- Alibaba Group Holding – Computing Services Unit

Daniel Adeniji Alibaba Group Holding, Apache, Apache Foundation ( Security - Vulnerability ), Chen Zhoujun ( Software Engineer ), log4j, Log4j ( Security - Vulnerability - Apache ), Log4jShell ( Security - Vulnerability - Apache - Log4j ), Security Vulnerability ( Security ), Technical

Background There are so many angles to the recently disclosed Apache Foundation Log4J's Security Vulnerabilities. As a footnote, this post covers the Log4Shell vulnerability. A month ago, 2021-November-24th, Chen Zhoujun from Alibaba's Cloud Security Team discovered the bug. Via email, Apache Foundation Log4J was quickly notified.   Stories South China Morning Post Apache Log4j bug: … Continue reading Apache/Log4j – Log4Shell:- Alibaba Group Holding – Computing Services Unit