Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-1525 Issue to group security concerns
  3. OFBIZ-12449

[SECURITY] CVE-2021-44228: Apache Log4j2

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Blocker
    • Resolution: Fixed
    • Trunk
    • 18.12.03
    • ALL COMPONENTS
    • None
    • Bug Crush Event - 21/2/2015

    Description

      CVE-2021-44228: Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints:
      https://logging.apache.org/log4j/2.x/security.html

      I'm not sure we are concerned, have no time to check, better safe than sorry...

      Attachments

        Issue Links

          is cloned by

          Sub-task - The sub-task of the issue OFBIZ-12470 [SECURITY] CVE-2021-45105: Apache Log4j2

          • Blocker - Blocks development and/or testing work, production could not run
          • Closed

          Activity

            People

              jleroux Jacques Le Roux
              jleroux Jacques Le Roux
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: