Source: thenewstack.io
Another Day, Another Log4j VulnerabilityCategory: Data, apple
https://www.linkedin.com/in/danlorenc, founder and CEO of the open source security supply chain company https://chainguard.dev/, joked with me after I said that, “https://thenewstack.io/log4shell-we-are-in-so-much-trouble/ may, with no exaggeration, be the worst IT security problem of our generation” by replying with a Simpsons meme, “https://twitter.com/lorenc_dan/status/1470831436605255680” This security problem isn’t anything as bad as the original. The first is going to keep you up at night for weeks, possibly months, to come.
That’s not good, but with a CVSS Score: 3.7, moderate severity, that’s much better than Log4Shell’s 10 out of 10 disaster rating.
Previous Log4Shell mitigations such as setting the system property log4j2.noFormatMsgLookup to true do NOT mitigate this specific vulnerability.
That’s not good, but with a CVSS Score: 3.7, moderate severity, that’s much better than Log4Shell’s 10 out of 10 disaster rating.
Previous Log4Shell mitigations such as setting the system property log4j2.noFormatMsgLookup to true do NOT mitigate this specific vulnerability.
Related Articles
Community Partners
DevOps Careers