How to detect the Log4j vulnerability in your applications

Image: Thinkstock. Article by Josh Bressers, VP of security at Anchore. InfoWorld, New Tech Forum – December 10, 2021.

A bug in the ubiquitous Log4j library can allow an attacker to execute arbitrary code on any system that uses Log4j to write logs. Does yours?

Yesterday the Apache Foundation released an emergency update for a critical zero-day vulnerability in Log4j, a ubiquitous logging tool included in almost every Java application. The issue has been named Log4Shell and received the identifier CVE-2021-44228. The problem revolves around a bug in the Log4j library that […]

Click here to view original web page at www.infoworld.com