Re: Remote code execution exploit found in Log4j - CVE-2021-44228

Passing along…

https://twitter.com/IBMJesseG/status/1470441038989119488

Small shell script to help with containment while you do impact assessment of your applications

https://github.com/ThePrez/IBMiOSS-utils/blob/master/avoid_log4stash.sh



Bryan


> On Dec 10, 2021, at 1:19 PM, Charles Wilt <[email protected]> wrote:
> 
> (cross posted to Java400 and Midrnage-L)
> 
> Anybody seen any information about the Java apps used by the OS?
> 
> Charles
> 
> https://www.lunasec.io/docs/blog/log4j-zero-day/
> *Updated @ December 10th, 10am PST*
> 
> A few hours ago, a 0-day exploit in the popular Java logging library log4j2 was
> discovered that results in Remote Code Execution (RCE) by logging a certain
> string.
> 
> Given how ubiquitous this library is, the impact of the exploit (full
> server control), and how easy it is to exploit, the impact of this
> vulnerability is quite severe. We're calling it "Log4Shell" for short
> (CVE-2021-44228 just isn't as memorable).
> 
> The 0-day was tweeted
> <https://twitter.com/P0rZ9/status/1468949890571337731> along
> with a POC posted on GitHub
> <https://github.com/tangxiaofeng7/apache-log4j-poc>. Since this
> vulnerability is still very new, there isn't a CVE to track it yet. This
> has been published as CVE-2021-44228
> <https://www.randori.com/blog/cve-2021-44228/> now.
> -- 
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: [email protected]
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: [email protected]
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
> 
> Please contact [email protected] for any subscription related questions.
> 
> Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com

-- 
This is the Java Programming on and around the IBM i (JAVA400-L) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/java400-l
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/java400-l.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com