Apache Log4j Vulnerability

nextx42 · Dec 13th 2021

Quote from Sophos:

Quote

On December 9, a severe remote code vulnerability was revealed in Apache’s Log4J , a very common logging system used by developers of web and server applications based on Java and other programming languages. The vulnerability affects a broad range of services and applications on servers, making it extremely dangerous—and the latest updates for those server applications urgent.
Sophos has completed an investigation to determine whether Sophos products are impacted. Please review the Security Advisory for status of your products.

Is this effecting the current i-MSCP version as well?

noyo · Dec 13th 2021

Code

find / -iname '*log4j*'

no ?

nextx42 · Dec 14th 2021

maybe Nuxwin can confirm?

**theqkash** · Dec 14th 2021

It's not vunerable as none of i-MSCP components are using Java and log4j as well.

**Nuxwin** · Dec 18th 2021

Good evening,

I can confirm that i-MSCP isn't affected in any way by the Log4J CVE.

https://cve.mitre.org/cgi-bin/…e.cgi?name=CVE-2021-44228

Apache Log4j Vulnerability

Share

Daily visitors