TABLE OF CONTENT
About the webinar
The recently identified vulnerability in Apache Log 4J 2 has impacted countless servers, putting widely used applications and cloud services at risk. Log4j2 is a ubiquitous library used by millions for Java applications. The vulnerability, when exploited, results in remote code execution on the vulnerable server with system-level privileges. As a result, it is rated at CVSS v3 score of 10.0.
In the PoC it has been highlighted that the vulnerability is extremely easy to exploit by submitting a specially crafted request to the vulnerable system, which in turn will instruct system to download and execute a malicious payload.
- Affected versions of Log4J – Apache Log4j 2.x <= 2.15.0-rc1
- Latest version available for upgrade – Apache Log4j 2.15.0-rc2 (released 06-12-2021)
Takeaways from the webinar:
- What is Apache Log4j vulnerability (CVE-2021-44228) and how it can impact you?
- List of affected systems/ software
- Availability of Patch
- Mitigation Approach and Steps
- How SISA can help secure your systems from CVE-2021-44228 vulnerability?
- Proof of Concept (POC)
https://www.youtube.com/watch?v=tdFREfd7a1I
Heading 1
Heading 2
Heading 3
Heading 4
Heading 5
Heading 6
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur.
Block quote
Ordered list
- Item 1
- Item 2
- Item 3
Unordered list
- Item A
- Item B
- Item C
Bold text
Emphasis
Superscript
Subscript